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Abstract 

Our main contributions can be divided in three parts: 

(1) Fixpoint extensions of first-order logic: we give a precise syntactic and semantic 
characterization of the relationship between FO(TC^) and FO(LFP). 

(2) Automata and expressiveness on trees: we introduce a new class of parity automata 
which, on trees, captures the expressive power of FO(TC^) and WCL (weak chain 
logic). The latter logic is a variant of MSO which quantifies over finite chains. 

(3) Expressiveness modulo bisimilarity: we show that PDL is expressively equivalent 
to the bisimulation-invariant fragment of both FO(TC^) and WCL. 

In particular, point (3) closes the open problems of the bisimulation-invariant character¬ 
izations of PDL, FO(TC^) and WCL all at once. 
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1 Introduction 


In this article we study the relative expressive power of various modal and first-order fixpoint 
logics; that is, logics which have some kind of iteration or recursion mechanism. 

On the modal side, we consider Propositional Dynamic Logic, a well-known extension of 
the basic modal language with non-deterministic programs (in particular, with the iteration 
construct vr*.) On the first-order side, we consider extensions of first-order logic with a 
reflexive-transitive closure operator (similar to that of PDL) and first-order logic extended 
with a fixpoint operator (similar to the modal /r-calculus). 

This article can be roughly divided in three parts: 

(1) Fixpoint extensions of first-order logic: we give a precise syntactic and semantic char¬ 
acterization of the relationship between FO(TC^) and FO(LFP). 

(2) Automata and expressiveness on trees: we introduce a new class of parity automata 
which, on trees, captures the expressive power of FO(TC^) and WCL (weak chain 
logic). The latter logic is a variant of MSO which quantifies over finite chains. 

(3) Expressiveness modulo bisimilarity: we show that PDL is expressively equivalent to the 
bisimulation-invariant fragment of both FO(TC^) and WCL. 

Extensions of first-order logic. It is well known that the reflexive-transitive closure R* of 
a binary relation R is not expressible in first-order logic |Fag75| . Therefore, a straightforward 
way to extend first-order logic is to add a reflexive-transitive closure operator: 

[TCx,y.(^(x,y)](u,v) 

which states that (u, v) belongs to the transitive closure of the relation denoted by (^(x, y). In 
the above expression, the sequences of variables x, y, u, v should all be of the same length; this 
length is called the arity of the transitive closure. This extension of first-order logic, called 
FO(TC) or sometimes transitive-closure logic, was introduced by Immerman in |Imm87) 
where he showed that it captures the class of NLOGSPACE queries. 

The arity hierarchy of FO(TC) was proven strict for finite models |Gro96) . Moreover, 
in some restricted classes of trees, full FO(TC) is even more expressive than MSO [TK09) . 
In this paper, however, we restrict our attention to FO(TC^), which is FO(TC) restricted 
to sequences of length one; that is, the reflexive-transitive closure can only be applied to 
formulas ip{x,y) defining a binary relation. This fragment of FO(TG) is easily seen to be 
included in MSO. 

A more general way to extend first-order logic is to add a fixpoint operator as in |GH82) . 
Gonsider, as an example, a first-order formula ip{p, x) where p is a monadic predicate and x 
is a free variable. The set of elements s G M of some model M which satisfy (/?(p, s) clearly 
depends on the interpretation of p. This dependency can be formalized as a map 

F^.xiY) := {s € M I s) is true at M}. 

Assuming that is monotone in p, the least and greatest fixpoints of this map will exist 
by the Knaster-Tarski theorem. It is now easy to extend first-order logic with a fixpoint 
construction 

[\-fPp-.x-F{P,x)]{z) 

which holds iff the interpretation of z belongs to the least fixpoint of the map F^,x- This 
extension is called first-order logic with unary fixpoints and is usually denoted by FO(LFP^). 
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This is because the arity of the fixpoint relation (in our case p) is unary. As with the transitive 
closure operator, we can consider a logic where the arity of the fixpoint is not bounded. This 
logic is known as FO(LFP) and was shown to capture PSPACE queries |Inini87) . In this 
article we focus on FO(LFP^), which we will denote as /rFOE. 

It is not difficult to see (c/. Section 12.91) that FO(TC) is included in FO(LFP) and 
FO(TC^) is included in /rFOE. However, to the best of our knowledge the exact fragment 
of /iFOE that corresponds to FO(TC^) has not been characterized. As we will prove in this 
article, the key notion leading to such a characterization is that of complete additivity. 

A formula ip is said to be completely additive in p if for any non-empty family of subsets 
{Pi}iei and variable x it satisfies the following equation: 

i i 

Complete additivity has been studied (under the name ‘continuity’) by van Benthem |vB96) . 
in the context of operations on relations that are safe for (that is, preserve) bisimulations. 
On the modal side, both Hollenberg |Hol98) and Fontaine and Venema [FonlOl IFV12] gave 
syntactic characterizations of complete additivity for the modal /r-calculus. Finally, Carreiro 
and Venema |CV14| showed that PDF is equivalent to the fragment /XcaML of the //-calculus 
where the fixpoint operator is restricted to completely additive formulas. 

Fact 1.1 f [CV14) l. PDF is effectively equivalent to //caML over all models. 

The first contribution of this article goes in the same direction as the above result. First 
of all, we consider a syntactic fragment /tcaFOE of //FOE by restricting the application of the 
unary fixpoint to formulas which are completely additive. We prove that FO(TC^) effectively 
corresponds to this fragment. 

Theorem 1.2. FO(TC^) is effeetively equivalent to /XcaFOE over all models. 

As a minor contribution towards the above theorem we give, in Section 13.11 a general 
characterization of fixpoints of arbitrary completely additive maps, that is, maps which need 
not be induced by a formula. 

Automata and expressiveness on trees. It is difficult to overstress the importance of 
automata-theoretic techniques in logical questions. The literature is vast in this topic, and 
we only name a few results which are relevant for the current article: The classical work of 
Rabin |R.ab69) introduced tree automata to show that the monadic second-order theory of 
the infinite binary tree is decidable. This is one of the most fundamental decidability results 
to which many other decidability results in logic and computer science can be reduced. 

In a more contemporary paper |Wal96) . Walukiewicz introduced parity automata for MSO 
on arbitrary trees. These automata were crucial in proving that the modal //-calculus is the 
bisimulation-invariant fragment of MSO |,TW96) . On the modal side, other classes of par¬ 
ity automata were used to prove the small model property |FFV 10) and uniform interpola¬ 
tion |DH00| for the //-calculus. 

If we restrict to sibling-ordered trees, nested tree-walking automata were used to separate 
FO(TC^) and MSO |tCSin) . Also, FO(TC) is known to correspond to automata with nested 
pebbles |EH06) on finite ranked trees. However, not much is known about automata models 
for FO(TC) on arbitrary unordered unranked trees. 

In this part of the article we introduce a new class of parity automata which we call 
additive-weak parity automata. The main result of this section shows that these automata 
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capture many of the logics of this article (over trees) and will work as a common bridge 
between them in later sections. Before we turn to a description of these automata, we first 
have a look at the automata introduced by Walukiewicz |Wal96) . corresponding to MSO (over 
tree models). 

We fix the set of proposition letters of our models as P and think of p(P) as an alphabet 
or set of colors. An MSO-automaton is then a tuple A = (A, A, n, aj), where A is a finite set 
of states, aj an initial state, and : A ^ N is a parity function. The transition function A 
maps a pair (a, c) G A x p(P) to a sentence in the monadic first-order language with equality 
FOEi(A), of which the state space A provides the set of (monadic) predicates. We shall refer 
to FOEi as the one-step language of MSO-automata, and denote the class of MSO-automata 
with AMt(EOEi). The semantics of these automata will be provided later in the article. 
Walukiewicz’s key result linking MSO to A?xt(FOEi) states the following: 

Fact 1.3 l |Wal96] l. MSO and Aut{¥0^i) are effectively equivalent over tree models. 

One of the directions of this result is proved by inductively showing that every formula (p 
in MSO can be effectively transformed into an equivalent automaton G A'ut(FOEi). In 
order to do that, these automata are shown to be closed under the operations of MSO, i.e.. 
Boolean operators and quantification over sets. 

The additive-weak parity automata that we introduce in Section |5] are a restriction of 
MSO-automata. In order to state the constraints, observe that given a parity automaton 
A we can induce a graph on A by setting transition from a to 6 if 6 occurs in A(a, c) for 
some c G p(P). A parity automaton A is called an additive-weak automaton if it satisfies 
the following constraints for every maximal strongly connected component CCA, states 
a,b ^ C and color c G p(P): 

(weakness) ¥l{a) = Q{b). 

(additivity) for every color c G p(P): 

If n(6) = 1 then A (a, c) is completely additive in C. 

If n(6) = 0 then A (a, c) is completely multiplicative in C. 


The class of these automata is denoted by Aut^„a(FOEi). 

As opposed to A'ut(FOEi), this class is not closed under the existential quantification of 
MSO. We prove that, instead, it is closed under the operations of weak chain logic (WCL), a 
monadic second-order logic which quantifies over finite chains (as opposed to arbitrary sets). 
Here, we define a chain on a tree T to be a set X such that all elements of X belong to the 
same branch. The original (non-weak) chain logic was introduced by Thomas in |Tho84) and 
further studied in |Tho961 Boj04| . 

The second main contrubution of this article proves that, on trees, the class of additive- 
weak automata captures the expressive power of many of the fixpoint logics that we have 
considered, and also of weak chain logic. 


Theorem 1.4. On trees, the following formalisms are expressively equivalent: 

(i) Autt„a(FOEi).' additive-weak automata based on FOEi, 

(a) WCL; weak chain logic, 

(Hi) //caFOE; completely additive restriction o/^FOE, 

(iv) FO(TC^); first-order logic with binary reflexive-transitive closure. 

Moreover, the equivalence is given by effective translations. 
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It is worth remarking that even though FO(TC^) and WCL coincide over trees, the logics 
FO(TC^) and WCL themselves are not equivalent. This is shown in Section [7.41 

Another point worth observing is that the original automata characterization of MSO 
was done for the signature with only one binary relation R (and many monadic predicates). 
In this article we prove all the results for a signature with a family of binary relations 
mainly because of our interest in the connection with poly-modal logics like PDL. Adapting 
the automata to this setting required new techniques which are (necessarily) different from 
the ones applicable to MSO-automata. For example, we use multi-sorted one-step languages 
in our automata. 

In order to prove the above results, we need a detailed analysis of certain fragments of 
FOEi. The third contribution of this article is to provide, in Section |4l a syntactical charac¬ 
terization of the monotone, completely additive and completely multiplicative fragments of 
multi-sorted monadic first-order logic with and without equality. 

Expressiveness modulo bisimilarity. The last part of this article concerns the relative 
expressive power of some languages when restricted to properties which are bisimulation- 
invariant. The interest in such expressiveness questions stems from applications where tran¬ 
sition systems model computational processes, and bisimilar structures represent the same 
process. Seen from this perspective, properties of transition structures are relevant only if 
they are invariant under bisimilarity. This explains the importance of bisimulation-invariance 
results of the form 

M = L/o, 

stating that, one language M is expressively complete with respect to the relevant (i.e., 
bisimulation-invariant) properties that can be formulated in another language L. In this set¬ 
ting, generally L is some rich yardstick formalism such as first-order or monadic second-order 
logic, and M is some modal-style fragment of L, usually displaying much better computa¬ 
tional behavior than the full language L. 

A seminal result in the theory of modal logic is van Benthem’s Characterization Theo¬ 
rem |vB77) , stating that every bisimulation-invariant first-order formula is actually equivalent 
to (the standard translation of) a modal formula: 


ML = FO/li. 


Over the years, a wealth of variants of the Characterization Theorem have been obtained. For 
instance, Rosen proved that van Benthem’s theorem is one of the few preservation results that 
transfers to the setting of finite models |Ros97) : for a recent, rich source of van Benthem-style 
characterization results, see Dawar & Otto |DOn9| . In this paper we are mainly interested is 
the work of Janin &: Walukiewicz |JW96| . who extended van Benthem’s result to the setting 
of fixpoint logics, by proving that the modal ^-calculus (/rML) is the bisimulation-invariant 
fragment of monadic second-order logic (MSO): 

^ML = MSO/j±. 

Despite the continuous study of the connection between modal and classical logics there are 
still important logics which are not well understood and represent exciting problems. In 
particular, the bisimulation-invarant fragments of WCL and FO(TC^) have not been char¬ 
acterized. Also, it is not known wether there is a natural classical logic whose bisimulation- 
invariant fragment corresponds to PDL (see [Hol98[ p. 91]), even though there are results 
leading towards this direction |vB981 IHol981 lvB96] . 
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The language now called Propositional Dynamic Logic was first investigated by Fisher 
and Ladner |FL79) as a logic to reason about computer program execution. PDL extends 
the basic modal logic with an inhnite collection of diamonds (vr) where the intended intuitive 
interpretation of (vr )(/3 is that “some terminating execution of the program vr from the current 
state leads to a state satisfying 99 ”. 

One of the most important and characteristic features of PDL is that the program con¬ 
struction vr* (corresponding to iteration) endows PDL with second-order capabilities while 
still keeping it computationally well-behaved. For an extensive treatment of PDL we refer 
the reader to [HTKOO) . 

As the reader may have observed, automata will play a crucial role connecting the logics 
in this article. The case of PDL will be no exception. The following recent result by Carreiro 
and Venema gives a characterization of PDL as additive-weak parity automata based on the 
one step language of hrst-order logic without equality: 

Fact 1.5 f [CV14) L PDL is effectively equivalent to Aut^aiFOi) over all models. 

In the last part of this article we build on the previous sections and obtain the following 
characterization result which closes the open questions for PDL, WCL and FO(TC^). 

Theorem 1.6. PDL is effectively equivalent to FO(TC^i/-H-. 

Theorem 1.7. PDL is effectively equivalent to WCL/j^. 

It is worth remarking that even though the bisimulation-invariant fragments of FO(TC^) 
and WCL coincide, the logics FO(TC^) and WCL themselves are not equivalent. This is 
shown in Section 17.41 Summing up, we give characterizations of PDL as the bisimulation- 
invariant fragment of both an extension of first-order logic and a variant of monadic second- 
order logic. 

2 Preliminaries 

2.1 General terminology, transition systems and trees 

Throughout this article we hx a set P of elements that will be called proposition letters and 
denoted with small Latin letters p, q, etc. We also hx a set D of atomic actions. 

We use over lined boldface letters to represent sequences, for example a list of variables 
X := xi,..., or a sequence of sets T G p{S)^. We blur the distinction between sets and 
sequences: a sequence may be used as a set comprised of the elements of the list; in a similar 
way, we may assume a hxed order on a set and see it as a list. As an abuse of notation (and 
to simplify notation), given a map / : ^ B and a G A”, a' G A™ we write /(a, a') to 

denote f{ai,...,an,a[,...,a'^). 

Given a binary relation R C X x Y, for any element x G X, we indicate with R[x] the 
set { 7 / G T I (x, y) G R} while R~^ and R* are dehned respectively as the transitive closure 
of R and the rehexive and transitive closure of R. The set Ran(i?) is dehned as UxeX 

Transition systems. A labeled transition system (LTS) on the set of propositions P and 
actions D is a tuple S = {S, R^^o, k, sj) where S is the universe or domain of §; the map 
K : S' ^ p(P) is a marking (or coloring) of the elements in S; C S^ is the accessibility 
relation for the atomic action £ G D; and s/ G 5 is a distinguished node. We use R without 
a subscript to denote the binary relation dehned as R := IJ^gD 

Observe that a marking k : S' —p(P) can be seen as a valuation : P ^ p{S) given by 
K^{p) = {s G S I p G k(s)}- We say that S is p-free if p ^ P or p ^ k{s) for all s G S. Given 
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Figure 1: A tree, a strict tree, and an LTS which is not a tree. 

a set of propositions P' and p ^ P', a p-extension of a LTS S = {S, k, sj) over P' is a 
transition system (5, i?£gD) sj) over P' U {p} such that fi:'(s) \ {p} = fi;(s) for all s € S. 
Given a set Xp C S, we use §[p Xp] to denote the p-extension where p € k'{s) iff s € Xp. 

Trees. A P-tree T is a LTS over P in which every node can be reached from sj, and every 
node except sj has a unique i?-predecessor; the distinguished node sj is called the root of T. 
A tree is called strict when Ran(i?f) n Ran(i2£/) = 0 for every i ^ ^. 

Each node s € T uniquely dehnes a subtree of T with carrier R*[s] and root s. We denote 
this subtree by T.s. We use the term tree language as a synonym of class of trees. 

The tree unravelling of an LTS S is given by S := {S,R^^£,,k^si) where S is the set of 
(D-decorated) hnite paths sj —ei —)-£2 • • • —in S stemming from s/; Ri(t,t') holds 
iff t' is an extension of t through the relation and the color of a path t € S' is given by the 
color of its last node in S. The ca-unravelling of S is an unravelling which has w-many 
copies of each node different from the root. 

Remark 2.1. The (w-)unravelling of a labelled transition system is a strict tree. 

Also observe that if there is only one relation R, the notion of tree and strict tree coincide. 

Chains and generalized chains. Let S be an arbitrary model. A chain on S is a set 
A C 5 such that {X,R*) is a totally ordered set; i.e., the following conditions are satisfied 
for every x,y G X: 

(antisymmetry) if xR*y and yR*x then x = y, 

(transitivity) if xR*y and yR*z then xR*z, 

(totality) xR*y or yR*x. 

A finite ehain is a chain based on a hnite set. A generalized chain is a set A C S' such that 
A C P, for some path P of S. A generalized finite ehain is a hnite subset ACS such that 
A C P, for some hnite path P of S. 

Proposition 2.2. Every ehain on S is also a generalized ehain on S. 

In Fig. [2] we show some examples of (generalized) chains and non-chains: in (a) the 
set Xa = {2,4} is a hnite chain. In (b) the generalized hnite chain A;, = {1, 2, 3, 4, 5, 6} 
is witnessed, among others, by the path 3—>-4— 7>5— >-1—)-2. Observe, however, 
that Afo is not a chain, since there is no possible total ordering of A^ by R* (antisymmetry 
fails). In (c) the generalized hnite chain Ac = {1, 3, 4, 5, 6 , 7, 9} is witnessed by the path 
1—>'2^---—>-7—)-2—)-8—observe that the element 2 is repeated in the path. 
Again, Ac is also not a hnite chain. In the last example (d), the set X^ = {1, 2,4,6} is not a 
generalized chain (and hence not a chain). 
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Figure 2: Examples and counter-examples of chains. 


The following proposition states a useful relationship between chains and generalized 
chains: on trees this distinction vanishes. 

Proposition 2.3. On trees, chains and general chains coincide. 

Proof. Observe that every path on a tree T sits inside some branch of T. Therefore every 
generalized chain X can be embedded in some branch of T and hence {X, R *) will be a total 
order. The key concept in the background is that on trees there are no cycles. □ 


2.2 Games 

We introduce some terminology and background on infinite games. All the games that we 
consider involve two players called Eloise (3) and Abelard (V). In some contexts we refer to 
a player 11 to specify a a generic player in {3,V}. Given a set A, by A* and we denote 
respectively the set of words (finite sequences) and streams (or infinite words) over A. 

A board game is a tuple Win), where G 3 and G\/ are disjoint sets whose 

union G = G^ U Gy is called the board oiG,ECGxG is a binary relation encoding the 
admissible moves, and Win C G^ is a winning condition. An initialized board game Q@ui is 
a tuple (G 3 , G\/, uj,E, Win) where uj G is the initial position of the game. 

A special case of winning condition is induced by a parity function n : G —>■ N by defining 
Winn := {g G G^ | the minimum parity occurring infinitely often in g is even}. In this case, 
we say that ^ is a parity game and sometimes simply write G = (G 3 , Gy, E, n). 

Given a board game G, a match of G is simply a path through the graph {G,E)', that 
is, a sequence vr = {ui)i^a of elements of G, where a is either a; or a natural number, and 
{ui,Ui^i) G E for all i with i -|- 1 < a. A match of G@ui is supposed to start at uj. Given 
a finite match vr = {ui)i^k for some k < ui, we call last(7r) := Uk-i the last position of the 
match; the player IT such that last( 7 r) G Gn is supposed to move at this position, and if 
£’[last( 7 r)] = 0 , we say that IT got stuck in vr. A match tt is called total if it is either finite, 
with one of the two players getting stuck, or infinite. Matches that are not total are called 
partial. Any total match vr is won by one of the players: If vr is finite, then it is won by the 
opponent of the player who gets stuck. Otherwise, if tt is infinite, the winner is 3 if vr G Win, 
and V if TT ^ Win. 

Given a board game G and a player 11 , let PM§ denote the set of partial matches of 
G whose last position belongs to player 11 . A strategy for II is a function / : PM^ —t G. 
A match tt = {ui)i<^a of G is f-guided if for each i < a such that Ui G Gn we have that 
rtj+i = /(tto, • • • ,Ui). Let u £ G and a / be a strategy for II. We say that / is a surviving 
strategy for II in G@u if 

(i) For each /-guided partial match tt of G@u, if last(7r) is in Gn then /(tt) is legitimate, 
that is, (last(7r), /(tt)) G E. 
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We say that / is a winning strategy for 11 in 0@u if, additionally, 

(ii) n wins each /-guided total match of G@u. 

If n has a winning winning strategy for G@u then u is called a winning position for IT in 
G- The set of positions of G that are winning for II is denoted by Wjnn(^)- A strategy / is 
called positional if /( tt ) = /{n') for each TT,7r' G Dom(/) with last(7r) = last(7r'). A board 
game G with board G is determined if G = Winj{G) U Winy{G), that is, each u (z G is a 
winning position for one of the two players. 

Fact 2.4 (Positional Determinacy of Parity Games |EJ91I lMos91] l. For each parity game G, 
there are positional strategies /a and /v respectively for player 3 and V, such that for every 
position u & G there is a player II such that /n is a winning strategy for II in G@u. 

From now on, we always assume that each strategy we work with in parity games is 
positional. Moreover, we will think of a positional strategy /n for player II as a function 
/n : Gn ^ G. 

2.3 Parity automata 

We recall the definition of a parity automaton, adapted to our setting. Since we will be 
comparing parity automata defined in terms of various one-step languages, it makes sense to 
make the following abstraction. 

Definition 2.5. Given a set A and sorts S = {si,...,s„}, we define a one-step model to 
be a tuple D = {D^i, ■ ■ ■, Ds„ , V) consisting of a domain D and sets , ■ ■ ■, Ds„ such that 
Ug Ds = D, and a valuation V : A ^ pD. A one-step model is called strict when the sets 
Ds£s are pairwise disjoint, that is, when ■ ■ ■, is a partition of D. Depending on 
context, elements of A will be called monadic predicates, names or propositional variables. 
When the sets are not relevant we will just write the one-step model as {D,V). The 

class of all one-step models will be denoted by SOIi and the class of all strict one-step models 
will be denoted by SOIf. 

Si 


{} 

Figure 3: One-step model with sorts (above) and valuation (below). 

A (multi-sorted) one-step language is a map C assigning to each set A and sorts S, a 
set C{A,S) of objects called one-step formulas over A (on sorts S). When the sorts are 
understood from context (or fixed) we simply write C{A) instead of C{A, S). We require that 
£(fj^ Ai, S) = fj^ G{Ai, S), so that for each p G C{A, S) there is a smallest A^ C A such that 
p G £(A(p,5); this A,p is the set of names that occur in p. 

We assume that one-step languages come with a truth relation: given a one-step model 
D, a formula p ^ C is either true or false in D, denoted by, respectively, Y) \= p and 
D ^ We also assume that £ has a positive fragment CA characterizing monotonicity 
in the sense that a formula p G £(A, 5) is (semantically) monotone iff it is equivalent to a 
formula p' G £^(A,>S). 

The one-step languages £ featuring in this paper all are induced by well-known logics. 
Examples include (multi-sorted) monadic first-order logic (with and without equality) and 
fragments of these languages. 



S2 


m {a} 
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Definition 2.6. A parity automaton based on the one-step language C, actions D and alpha¬ 
bet p(P) is a tuple A = {A, A,Q,aj) such that A is a finite set of states of the automaton, 
a/ G A is the initial state, A ; A x p(P) —)■ /1“*'(A, D) is the transition map, and : A —)• N 
is the parity map. The collection of such automata will be denoted by Aut{C, P, D). For the 
rest of the article we fix the set of actions D and omit it in our notation, we also omit the set 
P when clear from context or irrelevant. 

Acceptance and rejection of a transition system by an automaton is defined in terms of 
the following parity game. 


Definition 2.7. Given an automaton A = (A, A,n,a/) in Aut{C,P) and a P-transition 
system S = the acceptance game A(A, S) of A on S is the parity game 

defined according to the rules of the following table. 


Position 

Pl’r 

Admissible moves 

Parity 

{a, s) € A X S 

3 

{V ■. A ^ p{R[s]) 1 (Ajs],. 

A„[s],F) h A(a,K(s))} 

P(a) 

V : A ^ p(S) 

V 

{fi,t)\tGV{b)} 


max(r2[A]) 


A transition system § is accepted by A if 3 has a winning strategy in A(A, §)@(a/, s/), and 
rejected if (a/, sj) is a winning position for V. 


Many properties of parity automata are determined at the one-step level. An important 
example concerns the notion of complementation. 

Definition 2.8. Two one-step formulas p and are each other’s Boolean dual if for every 
structure (D, V) we have 

(An (An 

where is the valuation given by V^{a) := D \ V{a), for all a. A one-step language C is 
closed under Boolean duals if for every set A, each formula p G T(A) has a Boolean dual 
P'5 G C{A). 

Following ideas from |MS871 IKVn9] , we can use Boolean duals, together with a role switch 
between V and 3, in order to define a negation or complementation operation on automata. 

Definition 2.9. Assume that, for some one-step language C, the map (—)'5 provides, for each 
set A, a Boolean dual p^ G C{A) for each p G T(A). Given A = {A, A,^},ai) in Aut{£) we 
define its complement as the automaton {A, A^,aj) where A'5(a,c) := (A(a,c))^, and 
n'5(a) := 1 -|- n(a), for all a G A and c G p(P). 

Proposition 2.10. Let C and (—)‘5 be as in the previous definition. For each automaton 
A G Aut{C) and each transition structure S we have that 

A'5 accepts § iff A rejects §. 

The proof of Proposition 12.lOl is based on the fact that the power of 3 in A(A'5,§) is the 
same as that of V in A(A, S). 

As an immediate consequence of this proposition, one may show that if the one-step 
language C is closed under Boolean duals, then the class Aut{C) is closed under taking 
complementation. Further on we will use Proposition 12.10] to show that the same may apply 
to some subsets of Aut{/1). 
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2.4 Propositional Dynamic Logic 

Definition 2.11. The formulas of Propositional Dynamic Logic (PDL) on propositions P 
and atomic actions D are given by mutual induction on formulas and programs 

If ::= p I -‘If \ ipy ip \ {tt)p 

TT ::= I I 7r;7r | tt 0 tt | tt* | (/?? 


where p € P and £ G D. 

To give the semantics of PDL we take a standard approach and define it together with 
the relation i?| induced by a program vr on a model S = (S', sj)^ by mutual induction 


pS 


R. 


'■7r®p 


= Re 

= RluRl 


pS ._ pS) pS 

o rip 


RI* := (i?' 


S \ * 


Rl^ ■= {(s, s) G 5 X 5 I S[s/ ^ s] Ih p}. 


The semantics of PDL is then given as usual on the boolean operators and as follows on 
modal operators and propositions. 

§ Ih p iff s/ G K^(p) 

§ Ih ('7r)(p iff there exists t G S' such that R^{s,t) and S[s/ t] Ih p 


We drop the superscript in i?| when it is clear from context. 


2.5 The modal p-calculus 

The language of the modal p-calculus (pML) on P and D is given by the following grammar: 

p ::= q \ ^p | p V p | {i)p \ [ip.p 

where p, (7 G P, ^ G D and p is positive in p (i.e., p is under an even number of negations). We 
use the standard convention that no variable is both free and bound in a formula and that 
every bound variable is fresh. Let p be a bound variable occuring in some formula p G pML, 
we use (5p to denote the binding definition of p, that is, the formula such that either pp.dp is 
a subformula of p. 

The semantics of this language is completely standard. Let S = {S, R^^o, k, sj) be a 
transition system and p G pML. We inductively define the meaning which includes the 
following clause for the fixpoint operator: 

Ipp.V’f := f]{x CS\XD 

We say that p is true in § (notation S IL p) iff sj G |<pl^. 


2.6 Bisimulation 

Bisimulation is a notion of behavioral equivalence between processes. For the case of transi¬ 
tion systems, it is formally defined as follows. 

Definition 2.12. Let § = {S, Re^o, 1 ^, si) and §' = {S', R'^^q, k', s'j) be transition systems. 
A bisimulation is a relation Z C S x S' such that for all (t, t') G Z the following holds: 

(atom) p G K{t) iff p G K'{t') for all p G P; 
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(forth) for all f G D and s G Re[t] there is s' G R'i[t'] such that (s, s') ^ Z] 

(back) for all f G D and s' G R'i[t'] there is s G Ri[t] such that (s, s') G Z. 

Two transition systems S and S' are bisimilar (denoted S ±± S') if there is a bisimulation 
Z C S X S' containing (s/,s'j). 

The following fact about tree unravellings is central in many theorems of modal logics. It 
will also play an important role in this paper. 

Fact 2.13. S and its unravelling S are bisimilar, for every transition system S. 

As observed in the introduction, a key concept in this paper is that of bisimulation 
invariance. Formally, it is dehned as follows for an arbitrary language C: 

Definition 2.14. A formula G T is bisimulation-invariant if S S' implies that S Ih iff 
S' Ih ip, for all S and S'. 

Fact 2.15. Every formula of and therefore o/PDL, is bisimulation-invariant. 

2.7 Weak chain logic 

The non-weak version of chain logic (CL) was dehned in |Tho96) . and studied in the context of 
trees. As we said before, this logic is a variant of MSO which changes the usual second-order 
quantiher to the following quantiher over chains: 

T 1= dcp.y? iff there is a chain ACT such that T[p i—)■ A] \= (p. 

In this paper we will only work with a weak version of CL, that is, the quantihcation will be 
over finite chains. On the other hand, we also want to consider this logic on the class of all 
models. To give a dehnition of weak chain logic we adhere to what we think is the “spirit” 
of the dehnition of CL, as opposed to the “letter.” As observed in Section 12.11 the concept of 
chain on trees coincides with that of “subset of a path.” Therefore, on the class of all models, 
we choose to dehne the weak second-order quantiher as: 

S 1= iff there is a generalized finite chain A C S' such that S[p A] \= ip. 

More formally, the weak version of chain logic is given as follows. 

Definition 2.16. The one-sorted weak chain logic (WCL) on a set of predicates P and actions 
D is given by 

y? ::= (ip I p C g I Rg{p, g) | -.p | p V p | ^wcP-P> 

where p, g G P and £ G D. We denote this logic by WCL(P, D) and omit P and D when clear 
from context. We adopt the standard convention that no letter is both free and bound in ip. 

Definition 2.17. Let § = {S,Ri^o,K,si) be a labelled transition system. The semantics of 
WCL is dehned as follows: 


s 

iff 

k\p) = {s/} 

S 1= P E (7 

iff 

K^{p) C K^{q) 

S ^ Ri{p,q) 

iff 

for all s G k\p) there is t G K^q) such that sRit 

§\=^ip 

iff 

E> ^ ip 

E> \= (fV 'i/j 

iff 

§ \= ip or § \= 

S ^WcP‘^ 

iff 

there is a generalized finite chain ACS such that §[p i—>■ A] |= <p 


13 




A digression on second-order languages. The reader may have expected a more stan¬ 
dard two-sorted language for second-order logic, for example given by 

if ::= p{x) I Re,{x, y) | x ss y | -k/j | y? V y? | 3x.ip \ 3wcP-^ 

where p € P, £ € D, x,y € iVar (individual variables), and ~ is the symbol for equality. We 
call this language 2WCL. This semantics of this language is completely standard, with 3x 
denoting first-order quantification (that is, quantification over individual states) and 3yjcP 
denoting second-order quantification (that is, in this case, quantification over generalized 
finite chains). Both definitions can be proved to be equivalent, however, we choose to keep 
Definition 12.171 as it will be better suited to work with in the context of automata. 

Formulas of this languages are interpreted over (non-pointed) models M = {M,R£^o,k) 
with an assignment, that is, a map g : iVar —?• M interpreting the individual variables as 
elements of M. The key point is that WCL can interpret 2WCL by encoding every individual 
variable x G iVar as a set variable px denoting a singleton. The following is a more detailed 
proof of the remark found in |Venl2) . adapted for WCL. 

Proposition 2.18. There is a translation (—)* : 2WCL(P, D) —>■ WCL(P l±) Px, D) such that 

^ (p iff M[pa;eiVar ^ {^(a;)}] N 

where Px '■= {Px \ x G iVar}. 

The translation is inductively defined as follows: 

• {p{x)f := Px E P, 

• {Re{x,y)Y := Re{px,Py), 

• (x yf := Px^Py /\Py^ Px, 

• Negation and disjunction as usual, 

• (d^cP-T^)* := 3y,cP-T^, 

• {3x.(pY := 3.u,cPx-singleton(pa;) A 

where the translation crucially uses the predicates 

enipty(p) := 'iwcqfp E q) 

singleton(p) := ^wcqfq E O' ^ (einpty(g) V p E O')) 

Observe that the translation does not use the operator J|p and hence is well-defined on non- 
pointed models. We finish by proving the following claim. 

Claim 1. For every ip G 2WCL we have M,y |= (p iff M[pa;giVar { 5 ( 3 ^)}] N ■ 

Proof of Claim. We prove the inductive step for the first-order quantification. 

I => I Suppose M, y |= 3x.(p then there is s G M such that M,y[x 1 —>■ s] |= (p. By inductive 
hypothesis then there exists s £ M such that ^\px i—>■ {s}',Pypx {^(y)}] N This clearly 
implies that M[p 3 .giVar 1 -^ {^(a;)}] 1= 3^c7'x-singleton(pa;) A (pL 

I I This direction is very similar. ◄ 
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2.8 Fixpoint extension of first-order logic 

In this subsection we give an extension of FOE with a unary fixed point operator. This 
extension is known in the literature as FO(LFP^) but we will call it /rFOE. 

As usual with (extensions of) first-order logic, /rEOE will be interpreted over models with 
an assignment. See Section 12.71 (2WCL vs. WCL) for a discussion on how languages with 
individual variables fit in our setting. Also, because of the presence of individual variables, 
the syntax and semantics of the fixpoint operator is considerably more involved than for the 
modal ^-calculus. 

Definition 2.19. The first-order logic with equality and unary fixpoints (/rEOE) on a set of 
predicates P, actions D and individual variables iVar is given by 

::= q{x) \ Rfix, y) \ x ^ y \ 3x.ip \^Lp\ipy ip\ [\S?p.,x.tp{p, x)]( 2 :) 

where p, g G P, £ € D and x, y G iVar. Observe that z is free in the fixpoint clause and the 
fixpoint operator binds the designated variables x and p. 

The semantics of the fixpoint formula [LFPp:a,.(p(p, x)](z) is the expected one |CH82) . 
Given a model M and an assigment g, the map F^,x '■ p{M) —>■ p{M) is defined as 

■■= {t(iM\M\p^Y\,g[x^t\^p{p,x)}. 

The formula M,y |= [LFPp:a;.(p(p, x)](z) is defined to hold iff g{z) G LFP(E^a;)- 

Remark 2.20. Suppose that a formula p G /iPOE has free variables FV{p) = {x,y}. If 
we consider the fixpoint formula := [LFPp:a;.(p(p, x)](z) then would have as free variables 
FV{fi) = {z,y}. The free variables of p which are not bound by the fixpoint (in this case y) 
are called the parameters of the fixpoint. 

Parameters can always be avoided at the expense of increasing the arity of the fix- 
point |Libn41 p. 184]. That is, for example, take the fixpoint over a relation P{xi,... ,Xn) 
instead of just a predicate p. However, in this paper we will only consider fixpoints over 
unray predicates, and therefore we will allow the use of parameters. 

2.9 First-order logic with transitive closure 

Definition 2.21. The syntax of first-order logic extended with reflexive-transitive closure of 
binary formulas is given by the following grammar: 

p ::= p{x) \ X K. y \ Rfix,y) \ ^p \ p y p \ 3x.p \ [T Cx,y.p{x, y)] {z, w) 

where p, g G P, f G D and x, y,z,w G iVar. We denote this logic by FO(TC^). The semantics 
are standard for the first-order part and as follows for the new operator: 

^,9 \= [YCx,y.p{x,y)]{u,v) iff {g{u), g{v)) ^ R*^ 

where R^p := {(sa;,Sj/) £ M x M \ M,y[x Sx,y Sy] |= p}- 

Remark 2.22 ( |GKL'*~05l Example 3.3.8]). The meaning of the formula \JCx,yP{x,y)\{u^v) 
can be rephrased as saying that v G p*[u]‘, that is, x is a <p-descendant of u. This can be 
expressed with the formula [LfPp-y.y Ri n V (3x.p(x) A p{x,y))]{v). 
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2.10 Notational convention 

The following table works as a summary of the most used notation in this article. It should 
be taken as a set of general rules from which we try to divert as little as possible. 


Concept 

Notation 

Transition system (pointed model) 
Tree (pointed tree) 

Model (non-pointed) 

One-step model 

Automaton 

S = {S, RfgD, si) 

T = {T,Ri^D,K,si) 

M = (M, Ri^d, k) 

B = {D,V :A^p{D)) 

A,B,... 

Formula 

Set 

Sequence of objects 

Propositional variable 

Individual (first-order) variable 
Second-order (set) variable 

A, B,C,D,... X, Y,Z,W,... 
x,y,... a,b,... X,Y,... 

p,q,r,... 

x,y,z,w,... 

X,Y,Z,W,... p,q,r,... 

Assignment (of individual variables) 
Valuation (of names/propositions) 
Marking/coloring 

g : iVar ^ M 

V : A ^ p(D), kF P ^ p{S) 
:D^p{A), k:S^p{P) 


3 Characterization of FO(TC^) inside //FOE 

In this section we prove that FO(TC^) is equivalent to /XcaFOE, the fragment of /tFOE where 
the least fixpoint operator is restricted to completely additive formulas. That is, 

Theorem D EO(TCi) = /tcaFOE over all models. 

We start by giving a characterization of completely additive maps, which we will later 
use as a tool to characterize FO(TC^). 

3.1 Fixpoint theory of completely additive maps 

Definition 3.1. A function F : p{S)^ —>■ p(5') is eompletely additive in the i^^-coordinate if 
for every non-empty family of subsets {Yi C S’jig/ and Xi,... ,Xn C S' it satisfies: 

F{Xi,...,\jYi,...,Xn) = \jF{Xi,...,Yi,...,Xn). 

i i 

We say that F is completely additive (sometimes called completely additive in the product) 
if for every non-empty family {p. G p(s)n jg/ it satisfies: 

F{\JP^) = \JF{Pi). 

i i 

Remark 3.2. Observe that complete additivity in the i*^-coordinate implies monotonicity in 
the i*’'^-coordinate. Also, if a function is completely additive then it is so in every coordinate; 
however, the converse does not hold. A simple counterexample is F[A,B) = Ar\B. 

An alternative characterization of complete additivity in the i’'^-coordinate is given by 
asking that F restricts to singletons (or the empty set) in that coordinate. More formally, 

F{Xi, ...,Yi,...,Xn) = F(Wi,..., 0,..., A„) U U F(Ai,... , {y },... , X„). 

y&Yi 
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Along the same line, we can give an alternative characterization of complete additivity in the 
product. First, we need the following definition. 

Definition 3.3. Given X G p(>S')” we say that Y G p(*S')” is an atom of X if and only if 
Y = (0,, {xi },..., 0) for some element Xi G Xi standing at some coordinate i. We say 
that Q is a quasi-atom if it is an atom or Q = (0,..., 0). 

In this terminology, we can formulate the concept of complete additivity in the product 
by asking that F restricts to quasi-atoms; i.e., for every P G p(5')"', it should satisfy: 

F(P) = 1J{^(Q) I Q is a quasi-atom of P}. 

Another way to read this last definition is that every s G F(P) only depends on at most one 
singleton on one of the coordinates. 

Finite approximants of completely additive maps. Given a monotone map F : 
p{S) —)■ p{S), the approximants of the least fixpoint of F are the sets F°‘{0) C 5, where a 
is an ordinal. The map F“ is intuitively the a-fold composition of F. Formally, 

• F^{X) := 0, 

• F"+i(X) := F(F"(A)), 

• F^{X) := for limit ordinals A. 

The sets F°‘{0) are called approximants because of the following fact. 

Fact 3.4. For every s ^ S we have that s G LFP(F) iff s ^ F^{0) for some ordinal f. 

Moreover, this approximation starts at F^{ 0 ) = 0 and grows strictly until it stabilizes 
for some ordinal /3. This ordinal is called the closure or unfolding ordinal of F. Moreover, 
completely additive maps satisfy nicer properties regarding the approximants. 

Fact 3.5. If F is eompletely additive then it is eonstruetive, i.e., l-FP(F) = UeN^*(0)- 

Suppose now that we are given a map G{X,Y) which is completely additive. A natural 
question is whether the (least) fixpoint operation preserves complete additivity. That is, 
whether G'{Y) := LVPx-G{X,Y) is completely additive as well. To answer that question, we 
will have to look at the finite approximants of F{X) = G{X, Y) where Y is now fixed. In this 
subsection we give a fairly technical and precise characterization of the finite approximants 
of completely additive maps, and use it to prove the following interesting theorem. 

Let F : p{S) —>■ p{S) and Y C S. We define the restriction of F to Y as the function 
F^Y : P{Y) ^ p{Y) given by (A) := F(A) n Y. 

Theorem 3.6. 

(1) If G{X,Y) is completely additive then so is HfY) := LFPx.G'(A, Y). 

(2) For every eompletely additive functional F : p{M) —>■ p{M) and s € M we have that 

s G LFP(F) iff there exists Y such that s G LFP(Fpy) 

where Y = {ti,..., t^} satisfies ti+i G F|*y ^(0) \ F(y (0) and t^ = s. 

The following lemma gives a precise characterization of the finite approximants of fixpoints 
of completely additive functions. 
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Lemma 3.7. Let G : —>■ p{M) be a eompletely additive functional. For every 

s & M and Y G p{M)'^ we have that s G LFPx.G(Y, Y) iff there exist ti, ... ,tk € ^ such 
that tk = s and the following conditions hold: 

• G G(0, Q) where Q G p{Mff is a quasi-atom ofY^; and 

• ij+i G G{{ti}, 0), for all 1 < i < k. 

Proof. I I As an abbreviation, define F{X) := G{X,Y). Let s G LFP(F) and /c' G N be 
the smallest k' such that s G F^ (0). Such k' exists because of Fact 13.51 We dehne elements 
Ui G -F*(0) by downwards induction: 

• Case i = k': we set Ui := s, which belongs to F^ (0). 

• Case i < k': we want to define Ui in terms of rtj+i G -F*^^(0). By dehnition we have 
that Uj+i G G(-F*(0), Y). By complete additivity of G there is a quasi-atom (T, Q^) of 
(F*(0), Y) such that Uj+i G G{T,Q'). We consider the shape of the quasi-atom: 

(1) If T = {t} and = 0 we set Ui := t which satishes rij+i G G{{ui}, 0). 

(2) If T = 0 and is a quasi-atom of Y we set Q := and hnish the process. 

Observe that case (2) will eventually occur. In the worst case this it will occur when 
i = 1, because F^{0) is defined as 0. 

This process dehnes a series of elements Uk',Uk'-i,... ,Uj where j > 1. To dehne the elements 
tj we just shift this sequence. That is, we set k := k' — j 1 and := Uj+i-i for 1 < i < k. 

I -4= I This direction will easily follow from this claim: 

Claim 1. ti g T*(0) for all 1 < i < /c. 

Proof of Claim. We prove it by induction. For the base case, we have by hypothesis 
that ti G G{ 0 , Q) where Q is a quasi-atom of Y. By monotonicity of G we then have 
ti G G(0,Y) which means, by dehnition of F, that ti G F( 0 ). For the inductive case let 
tj+i G G{{ti}, 0). By inductive hypothesys ti G F^{ 0 ) therefore, by monotonicity of G, we 
have that tj+i G G(F’*(0),0). Again by monotonicity, we get that tj+i G G(T*(0), Y). By 
dehnition of F we can conclude that tj+i G F'^~^^{0). ◄ 

In particular, = s G F^{0) and therefore we get s G LFPx.G(Y, Y). □ 

Note that the above lemma is not restricted to any particular logic, as it expresses a 
property about an arbitrary completely additive functional G. We can now prove our main 
theorem about completely additive functionals. 

Proof of Theorem I3.6lf l 1. Let G{X,Y) be a completely additive functional and dehne 
H(Y) := LFPx.G'(Y, Y). Suppose that s G F[(Y). Let Q be the quasi-atom of Y given by 
Lemma [an we will prove that s G HiQ) = LFPx.G'(Ai, Q). Observe that, by the lemma, 
ti G G(0,Q). The key observation is that as tj+i G G({tj},0), by monotonicity we get 
that tj+i G G({ti},Q). From this it can be easily seen that, as s G G({tfc_i},Q) and G is 
monotone, we get s G LFPx.G(X, Q). QED 

Proof of Theorem l3.6lf 2L Let F : p{M) —>■ p{M) be completely additive and let s G M; 
we prove that s G LFP(T) iff there exists Y such that s G LFP(T|'y) where Y = {ti,... ,tfc} 
satishes tj+i G F^y^{0) \ F^y(0). 

I ^ I Let Y = {ti ,... ,tk} be the set obtained using Lemma 13.71 In the lemma we already 
proved that ti G T*(0) for all i. We now prove the following stronger version of the claim: 
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Claim 2. tj g -F|*y(0) for all i. 

Proof of Claim. For the base case, we know that ti € F{0) by Claim IT] (Lemma 13.71) : 
moreover, by definition ti € Y. Hence ti G F{0)r\Y which, by definition of F^Y: is equivalent 
to ti G i^fy(0). For the inductive case let tj+i G ^"*'*'^(0). By definition of we have 
that G F{F^{0)). Now we use the iductive hypothesis and get that tj+i G (0)). 

As we did in the base case, because tj+i G Y, we know that tj+i G i^(i^^*y(0)) fl Y which by 
definition of F^y and regrouping we can conclude that tj+i G i^^*y^(0). ◄ 

In particular s G F|.y(0) and therefore s G LFP(F|'y). 

I I This direction goes through using a monotonicity argument. That is, using that for all 
X we have T|-y(A) C F{X), it is not difficult to prove that F^{X) C F^{X) for all a, which 
entails that LFP(Tfy) C LFP(T). QED 

Of course, the functionals with which we will work are induced by formulas of /uML, 
;uFOE and WCL which are completely additive. This leads us to analyze the completely 
additive fragment of /iFOE. 

3.2 Completely additive restriction of /iFOE 

Before stating the main definitions we need to introduce some useful notation. Given a non- 
pointed model M = {M, , k) , elements q G P” and X = (Ai,...,X„) G we 

introduce the following notation: 

/t^(q) := K\qi),...,K\qn) 

M[q i-A X] := M[(/j ^ Xi \ \ < i < n] 

M[q|'X] := M[(/i i-A i^{qi) H Xj | 1 < i < n]. 

We are now ready to state the main definition of this section. 

Definition 3.8. We say that p G /iFOE is completely additive in {g^i,..., (/„} = Q C P if for 
every model M and assignment g it satisfies 

M ,5 ^ iff M[Q|'Y],(/ 1= If for some quasi-atom Y of k\Q). 

Proposition 3.9. If p ^ /iFOE is completely additive in Q then for every model M, assign¬ 
ment g and variable x G iVar, the map Gx ■ p(M)"' —>■ p{M) given by 

Ga;(Z) := {t G M I M[Q i->- Z],g[x 1] |= 


is completely additive. 

Proof. Fix a model M, assignment g and free variable x G FV{(p). We want to prove that 
Gx{7j) is completely additive. An element t belongs to Ga;(Z) iff M[Q i—>■ 7l\,g[x !—>■/] \= p. 
By complete additivity of p, this occurs iff M[Q i—> Y],^([x i-a t] \= p for some quasi-atom Y 
of Z. By definition of Gx, this is equivalent to saying that t G Gx(Y). Therefore, the map 
Gx is completely additive. □ 

Next, we provide a definition of a fragment of /iFOE, and shortly after that we prove that 
every formula in this fragment is completely additive. 
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Definition 3.10. Let Q C P be a set of monadic predicates. The fragment /iFOEADDQ(P, D) 
is defined by the following rules: 

(/?::= V’ I q{x) I ^x.(f{x) I v? V v? I v? A -0 I [LFPp:3;.^(p, x)](2;) 

where g € Q, -0 G /iFOE(P \ Q, D), p G P \ Q and ^{p,x) G /rFOEADDQu|p}(P, D). 

Observe that the atomic formulas given by equality and relations are taken into account by 
this definition in the clause. 

Proposition 3.11. Every p G /xFOEADDq is completely additive in Q. 

Proof. The proof goes by induction, most cases are solved similar to Lemma 14.281 We focus 
on the inductive step of the fixpoint operator. Let p be [LFPp:a,.'0(p, x)](z), M be a model 
and g an assigment, we have to prove that 

M, g 1= iff M[QfY],gr 1= p for some quasi-atom Y of «:^(Q). 

By semantics of the fixpoint operator M.,g |= (/j iff g{z) G LFP(Ep:a;) where 

Fp-.x{P) := {t G M I M[p P],g[x i-A t] |= if}. 

It will be useful to take a slightly more general definition: consider the map 

Z) := {t G M I M[p P; Q ^ Z],5[x ^ t] h f:} 

and observe that Fp-x{P) = Gp:x{P, k\Q)) and therefore their least fixpoints will be the 
same. By inductive hypothesis and Proposition 13.9[ we know that Gp;x(P, Z) is completely 
additive. Using Theorem 13.61 11 we get that LfPp.Gp-x{P,K^{Q)) is completely additive as 
well. That is, there is a quasi-atom Y of k^(Q) such that 

t G IFPp.G^.JP,k\Q)) iff t G LFPp.G^,^(P,Y) 

from which we can conclude that M.,g \= p M[Q|"Y ],5 \= P- D 

This proves that the above fragment is “sound” with respect to the property of complete 
additivity. We conjecture that the fragment is also “complete” with respect to this property, 
i.e., that every formula of /rFOE which is completely additive in Q is equivalent to a formula 
in /tFOEADDq. We do not pursue this matter because it goes beyond the objectives of the 
current article. 

Conjecture 3.12. Every formula cp G ^FOE which is completely additive in Q is equivalent 
to some formula p' G /tFOEADDq. 

Finally, we define ^caFOE: 

Definition 3.13. The fragment /icaFOE of /uFOE is given by the following restriction of the 
fixpoint operator to the completely additive fragment: 

p ::= q{x) \ Re{x,y) \ x^y\ 3x.ip \^(p\py p\ [LFPp,a;.^(p, x)](z) 

where p, g G P, G D, x, y G iVar; and f{p,x) G /iFOEADD|p| n pcaFOE. 
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3.3 Equivalence of FO(TC^) and ficaPOE 

In this subsection we prove Theorem 11.21 That is, we give effective translations that witness 
the equivalence FO(TC^) = /icaFOE. 

Prom FO(TC^) to /XcaFOE. In Remark 12.221 we observed that the reflexive-transitive clo¬ 
sure of a formula can be expressed as a fixed point. That is, 

[JCx^y.ip{x,y)]{u,v) = [lfPp:y.y « u V {3x.p{x) A ip{x,y))]{v). 

It is easy to see (syntactically) that the formula inside the fixpoint is completely additive in p 
(which is a fresh variable); therefore it belongs to /icaFOE. Moreover, the equivalence holds 
for all models, in particular, for trees. 

Prom /XcaEOE to FO(TC^). An alternative way to read Theorem 13.61 21 is that an ele¬ 
ment s belongs to the least fixed point of a map F iff there is a sequence of elements from 
P(0), P^(0 ),... which eventually reaches s. We will now introduce a new notation which is 
closer to this reading, and rephrase Theorem 13.61 21 in those terms. The connection between 
fixpoints of completely additive maps and transitive closure will become clear. 

Definition 3.14. The relation -op is defined for every t,t' & M as t -op t' iff t' G F{{t}). 

With this notation. Theorem 13.61 21 can be reformulated as follows: 

Corollary 3.15. Let F : p{M) —>■ p{M) be completely additive. For every s d M we have 
that s G LFP(P) iff there exist ti G F{0) such that ti — s. 

Let p{p, z) belong to /xFOEADDp. It only remains to observe that the required relations 
can be defined in FO(TC^), as follows: 

• V (z F{0) is equivalent to (/9(T,t>), 

• u -^p V \s equivalent to ip{p, v)\p{y) u y]. 

To finish, we define [lfPp:z.p{p,z)]{v) := 3ti.p(±,ti) A [JCx,y.^pr{x,y)]{ti,v). 

4 One-step logics, normal forms and additivity 

In this section we define the one-steps logics that we use in the rest of the article, namely: 
one-step first-order logic with and without equality (FOEi, FOi). The main theorems of 
this section prove normal forms for these logics and give syntactical characterizations of the 
monote and completely additive fragments that we use in later sections. 

Definition 4.1. The set FOEi(A,iS) of (multi-sorted) one-step first-order sentences (with 
equality) is given by the sentences formed by 

p ::= a{x) | x « y | \ pM p \ 3x:s.p 

where x,y G iVar, a G A and s G 5. The one-step logic FOi(A,iS) of multi-sorted first-order 
sentences without equality is defined similarly. 

Without loss of generality, from now on we always assume that every bound variable 
occurring in a sentence is bound by an unique quantifier. Recall that given a one-step logic 
Cl we write Cf (A) to denote the fragment where every predicate a G A occurs only positively. 

The multi-sorted semantics that we will use in this article is slightly non-standard: for 
example, the individual variables and names (predicates) do not have a fixed sort. We define 
the semantics formally to avoid confusions. 
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Definition 4.2. Let € F0Ei(A,5) be a formula, D = {Dg^,..., be a one-step 

model on sorts S and g : iVar —5- p{D) be an assignment. The semantics of FOEi(yl, 5) is 
given as follows: 


U,g\=a{x) iff g{x)€V{a), 

B,g\=x^y iff g{x)=g{y), 

D,(/ 1= 3a::s.(/? iff D,g'[x ^ d\\= (p for some d G Ds, 

where the Boolean connectives are defined as expected. 

In the following subsections we provide a detailed model theoretic analysis of the one-step 
logics that we use in this article, specifically, we give: 

• Normal forms for arbitrary formulas of multi-sorted EOi and FOEi. 

• Strong forms of syntactic characterizations for the monotone and completely additive 
fragments of FOi and FOEi. Namely, for Ci G {FOi,FOEi} we give: 

(a) A fragment /liMON^/ and a translation (—)° : Ci{A) —/liMON^/(A) such that 
for every G we have pt = (p° ]S (p \s monotone in A' C A, 

(b) A fragment Ci/KDDa' and a translation (— )^ : Ci{A) — /liADDyi'(A) such that 

for every G we have iff 9 ? is completely additive in A' C A. 

Moreover, we show that the latter translation also restricts to the fragment i.e., 

(c) The restriction (—)+ : C,i{A) —)■ /l]*'ADDyi/(A) of is such that for every 

p G Cf we have p = p^ iff p is completely additive in A' C A. 

• Syntactic characterizations of the completely multiplicative fragments of FOi and FOEi. 

• Normal forms for the monotone and completely additive fragments. 

4.1 Normal forms 

Given a set of names A and S' C A, we introduce the notation 

^s{x) := /\ a{x) A /\ ^a(x). 
a^S a£A\S 

The formula ts{x) is called an A-type. We usually blur the distinction between ts{x) and 
S and call S an A-type as well. A positive A-type is defined as Tg (x) := AaeS®(*)' 
use the convention that if S = 0, then Tg{x) is T and we call it the empty positive A-type. 
Given a one-step model D we use |S||) to denote the number of elements of sort s G S that 
realize the A-type rg in D. Formally, it is defined as |S|q := |{(i G : D \= r 5 '((i)}|. 

A partial isomorphism between two multi-sorted one-step models D = , ■ ■ ■, Ds„ ■> 

and D' = ..., V') is a partial function f : D ^ D' which is injective and for all 

d G Dom(/) it satisfies the following conditions: 

(sorts) d and f{d) have the same sorts, 

(atom) d £V{a) f{d) G V'{a), for all a G A. 

Given two sequences d G and d' G D'^ we use / : d i—d' to denote the partial function 
f : D D' defined as /(dj) := d'^. If there exist di,dj such that di = dj but d[ ^ d'^ then the 
result is undefined. 
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Definition 4.3. The quantifier rank qr(ip) of ip ^ FOEi is defined as follows 

• If is atomic qr{ip) = 0, 

• If if = - 1 ^ then qr{ip) = qr{il>), 

• If if = A or (p = ipi y il !2 then qr{ip) = max{gr(V’i), qr{'4>2)}, 

• If (f = Qx'.s.ijj for Q € {3,V} then qr{ip) = 1 + qr{xjj). 

Given a one-step logic C we write D D' to indicate that the one-step models D and D' 
satisfy exactly the same formulas ip ^ C with qr{ip) < k. The logic L will be omitted when 
it is clear from context. 

4.1.1 Normal form for FOi 

We start by stating a normal form for one-step first-order logic without equality. A formula 
in basic form gives a complete description of the types that are satisfied in a one-step model. 

Definition 4.4. A formula ip G F0i(A,5) is in basic form if ip = \/ /\g VFo(^)n)s where 
in each conjunct 

VFo(S,n)s := f\ 3 x:s.ts{x) a Vx:s. V Ts{x) 
sgs 5en 

for some set of types S,n C p(A). 

Remark 4.5. FOi cannot distinguish between arbitrary and strict one-step models. More 
formally, every arbitrary one-step model {Di,..., D^, V) is equivalent (for FOi) to the model 
{Di X {!},..., Dn X {n}, 14) where 14(a) := {{d, k) \ d € V (a), A: G {0,..., n}}. Therefore, 
when proving results for FOi, it is not difficult to see that we can restrict to the class of strict 
one-step models. 

It is not difficult to prove, using Ehrenfeucht-Fraisse games, that every formula of monadic 
first-order logic without equality (i.e., unsorted FOi) is equivalent to a formula in basic 
form over strict models. By Remark 14.51 the normal form also holds over arbitrary models. 
Proof sketches for the unsorted case can be found in |GTW02l Lemma 16.23] and |Venl4[ 
Proposition 4.14]. We omit a full proof for the sorted case because it is very similar to the 
case of FOEi. 

Proposition 4.6. Every formula o/FOi(A,5) is equivalent to a formula in basic form. 

4.1.2 Normal form for FOEi 

In this subsection we will have to pay particular attention to the kind of one-step models 
that we are working with. The case of FOEi is much more complicated, as this logic can 
distinguish between strict and arbitrary one-step models. We first give a normal form for 
strict models and afterwards generalize it to arbitrary models. 

The strict case. We prove that every formula of multi-sorted monadic first-order logic 
with equality (i.e., FOEi) is equivalent to a formula in strict basic form over strict models. 

Definition 4.7. A formula ip G FOEi(A,<S) is in strict basic form if (/p = V As ^FOE(T,n)s 
where in each conjunct we have 

VFOE(T,n)s := 3x:s.(diff(x) A/\rrAiCi)/W^:s.(diff(x, 4-t \/ ^ 5 ( 2 ;))) 

i Sen 

such that T G p{A)^ for some k, s £ S and II C T. The predicate diff(y), which states that 
the elements y are different, is given as diff(7/i, ...,?/„);= Ai<m<m'<n(ym 9^ Vm')- 
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We start by defining the following relation between strict one-step models. 

Definition 4.8. Let D and D' be strict one-step models. For every A: G N we define 

D D' ^ V5 C s G 5.(1^115 = \S\h^ <kov \S\h, \S\h^ > k) 

Intuitively, two models are related by when their type information coincides ‘mod¬ 
ulo k\ Later we will prove that this is the same as saying that they cannot be distinguished 
by a formula of FOEi with quantifier rank lower or equal to k. For the moment, we prove 
the following properties of 

Proposition 4.9. The following hold 

(i) is an equivalence relation, 

(a) has finite index, 

(Hi) Every E G is characterized by a formula G F0Ei(A,5) with qr{g?^) = k. 

Proof. We only prove the last point. Let E G and let D G E be a representative. Eor 

every s G 5 call Si,Sn ’T A to the types such that = Ui < k and 5^^,..., S!^ C A 

to those satisfying > k. Now define 

Te,s ■= A ■ ■ • ,a:„.:s.diff(xi,.. .,Xni) A 

i<n 

A TSiixj) Ayz:s.diS{xi,...,Xni,z) ^ ^Tsfiz)) A 

i<ni 

A (3xi,...,Xfc:s.diff(xi,...,Xfc) A A 

i<m 

Einally set := /\^ It is easy to see that qr{(p^) = k and that D' |= ip^ iff D' G E. 

Observe that gives a specification of E “sort by sort and type by type”. □ 

In the following definition we recall the notion of Ehrenfeucht-Eraisse game for EOEi, 
slightly adapted for the multi-sorted setting, which will be used to establish the connection 
between and 

Definition 4.10. Let Dq = (Do,Vo) and Di = {Di,Vi) be strict multi-sorted one-step 
models. We define the game EE^(Do,Di) between V and 3. If D* is one of the models we 
use D_j to denote the other model, we do the same with elements and elements. Note that 
in this definition the index i will never refer to a sort, but to one of the models. A position 
in this game is a pair of sequences ^ G Dq and ^ G Df with n < k. The game consists of 
k rounds where in round n -|- 1 the following steps are made 

1. V chooses an element di in one of the Dj, 

2. 3 responds with an element d-i in the model D_j. 

3. Let ^ G D” be the sequences of elements chosen up to round n, they are extended to 

Si' := ^ • dj. Player 3 survives the round iff she does not get stuck and the function 
fn+i ■ I—t is a partial isomorphism of one-step models. 

Player 3 wins iff she can survive all k rounds. Given n <k and ^ G Df such that fn 

is a partial isomorphism, we use EP^(Do, Di)@(^, sp) to denote the (initialized) game where 

n moves have been played and k — n moves are left to be played. 
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Lemma 4.11. The following are equivalent 
1 . 

2 . Do Di, 

3. 3 has a winning strategy in EF^(Do,Di). 

Proof. Step m to ([2]) is direct by Proposition 14.91 For (j2|) to m we give a winning strategy 
for 3 in FF^(Do,Di). We do it by showing the following claim 

Claim 1. Let Dq Di and ^ € Df be such that n < k and ^ i—^ is a partial 
isomorphism; then 3 can survive one more round in FF^(Do, Di)@(^,^). 

Proof of Claim. Let V pick di € Di such that di has type T C A and sort s £ S. If di 
had already been played then 3 picks the same element as before and fn+i = fn- If di is 
new and \T\^, > k then, as at most n < k elements have been played, there is always some 
new d-i G D-i that 3 can choose that matches di. If |T||j. = m < /c then we know that 
= m. Therefore, as di is new and /„ is injective, there must be a d-i € D-i of sort s 
that 3 can choose. ◄ 

Step ([3]) to ([1]) is a standard result |FF951 Corollary 2.2.9] in the unsorted setting, we 
prove it for the multi-sorted setting and for completeness sake. 

Claim 2. Let ^ € Df and ip{zi ,..., Zn) £ FOFi(^) be such that qr{ip) < k — n. If 3 has a 
winning strategy in FF^(Do, Di)@(^,^) then Dq |= iff Di |= v^(^). 

Proof of Claim. If </? is atomic the claim holds because of ^ i—^ being a partial 
isomorphism (more specifically, the atom condition). Boolean cases are straightforward. 
Let ip{zi,..., Zn) = 3x:s.'ip(zi,..., Zn,x) and suppose Dq \= Hence, there exists 

do £ Dq of sort s such that Dq |= '0(^, do)- By hypothesis we know that 3 has a winning 
strategy for EF^(Do, Di)@(^,^). Therefore, if V picks do £ Dq she can respond with some 
di £ Di and has a winning strategy for EF^(Do, Di)@(^-do,^-di). First observe that, 
as 3 survives the round, then ^-do ^-di is a partial isomorphism and hence (by the 
sorts condition) the lements do and di will have the same sort. By induction hypothesis, 
because qr(fj) < k — {n + 1), we have that Dq \= 'if{^,do) iff Di \= il)(^,di) and hence 
Di 1= 3x:s.?/)(^, x). The other direction is symmetric. ◄ 

Combining these claims finishes the proof of the lemma. □ 

Theorem 4.12. Over strict models, every formula ip £ FOEi(H,iS) is equivalent to a formula 
£ F0Ei(H,5) in strict basic form. 

Proof. Let qr{(p) = k and let [(/j] be the models satisfying (p. As is the same as 

by Lemma 14.111 it is easy to see that ip = I ^ Remember that 

is defined as /\^ ip^ Therefore, it is enough to see that each ^ is equivalent to some 

VFOE(T)n)s where Tj C A and H C T. From this, we can conclude that ip is equivalent to 

V':= Ie _ 

The crucial observation is that we will use T and H to give a specification of the types 
“element by element”. Let D G F be a representative. Call Si,...,Sn C A to the types 
such that = Ui < k and S[,..., S'j^ C A to those satisfying ISdlj > k. The size of the 

sequence T is defined to be (XliLi ^0 + k x m where T is contains exactly n* occurrences 
of type Si and k occurrences of each S''. On the other hand H = {S(,..., S(„}. It is 
straightforward to check that if"^ ^ is equivalent to VFOE(T,n)s, however, the quantifier 
rank of the latter is only bounded hy k x 2l"^l -|- 1. □ 
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The arbitrary case. We now prove that we can also give a normal form for arbitrary 
models. As an intuition on why the strict normal form “lifts” to arbitrary models observe 
that any one-step model on sorts <S can be seen as a strict one-step model on sorts p(<S). 

Definition 4.13. For an arbitrary one-step model D on sorts S we define to be the strict 
one-step model on sorts p{S) obtained by redefining the sorts of D as follows: an element 
d of belongs to the sort S C 5 iff it belongs to all the sorts s € S in D and it does not 
belong to any sort s' € <5 \ S in D. 

For every p G FOEi(A, 5) we define the translation G FOEi(A, p(5)) inductively: it 
behaves homomorphically in every operator which is not the existential quantifier. For the 
existential quantifier, it is defined as follows: 

(3a::s.(/?(a:))^ := \y{3x:S.(^^(a:) | {s} CSC 5}. 

The following proposition states the expected relationship. 

Proposition 4.14. For every p G FOEi(A, 5) and arbitrary one-step model D on sorts S 
we have that Y) \= tp iff |= 

The next step is to use Theorem 14.121 (over strict models) to get a strict normal form ip 
of After that we want to transfer the normal form to arbitrary models, therefore we need 
something like a converse of Proposition 14.141 With this in mind, we introduce the following 
abbreviation 3x:S!: 

3x:S!.(/?(x) := 3x, xi:si,..., x,i:s„.equal(x, xi,..., x„) /\ ( /\ Vz:s.x z) A p{x) 

sG5\S 

where equal(yi ,... ,yn) ■= /\i<m<niym ~ Um-ei)- Intuitively speaking, the quantifier 3x:S! 
says that there is an element x which belongs exactly to the sorts S C p(5). 

Definition 4.15. For every ip G FOEi(A, p{S)) we define the translation ip^ G FOEi(A,iS) 
inductively: it behaves homomorphically in every operator which is not the existential quan¬ 
tifier. For the existential quantifier, it is defined as follows: 

(3x:S.V'(x))'*' := 3x:S!.V''*'(a:) 


for S G p(iS). 

The following proposition states the expected relationship. 

Proposition 4.16. For every ip G FOEi(A, p(5)) and arbitrary one-step model D on sorts 
S we have that Y) \= ip^ iff D^" |= ip. 

We are now ready to state the normal form of FOEi for arbitrary models and generalize 
Theorem 14.121 

Definition 4.17. A formula p G FOEi(A, 5) is in basic form p = \//\g Vfoe(T, n)s 
where in each conjunct we have 

VFOE(T,n)s := 3x:S!.(diff(x) A/\rri(xi) A V 2 ;:S!.(diff(x, 2 ;) ^ \/ ts{z))) 

i Sen 

such that T G p{A)^ for some fc, S C 5 is non-empty and 11 C T. 

Theorem 4.18. Every p G FOEi(A, 5) is equivalent to a formula in basic form. 
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Proof. We use the notation that we have developed in this subsection and proceed as follows: 


T) \= (p iff 1= (Proposition 14.141) 

iff ^ V' (Theorem 14.121 strict normal form) 

iff Y)\=Tp'^. (Proposition 14.161) 

Observe that by construction ijj'^ is in basic normal form. □ 

4.2 One-step monotonicity 

Given a one-step logic C{A) and formula p € ^{A). We say that p is monotone in A' C A if 
for every one step model {D, V : A ^ pD), a £ A' and assignment g : iVar —> D, 

If {D, V),g 1= p and V{a) C E then {D, V[a E]),g |= p. 

We use C'^{A) to denote the fragment of C{A) composed of formulas monotone in all a £ A. 

Monotonicity is usually tightly related to positivity. If the quantifiers are well-behaved 
then a formula p will usually be monotone in o € ^ iff a has positive polarity in p, that 
is, if all of its occurrences are under an even number of negations. This is the case for all 
one-step logics considered in this article. In this section we give a syntactic characterization 
of monotonicity for several one-step logics. 

Convention. Given P, S ^ A, we use Tg to denote the P-positive type given by S, defined as 
rs [x) ■■= l^{a{x) I a G S'} A l\{^a{x) | a G ^ such that a ^ S and a ^ P}. 

4.2.1 Monotone fragment of FOi 

Theorem 4.19. A formula of FOi(^,<S) is monotone in A' A iff it is equivalent to a 
sentence given by the following grammar: 

p ::= V’ I a{x) \ 3x\s.p \ ^x'.s.p \ p hp \ p\/ p 

where a £ A', s £S and £ FOi(A \ A', <S). We denote this fragment as FOiMON^/(^, 5). 
The result follows from the following lemma. 

Lemma 4.20. The following hold: 

1. Every p £ F0iM0N^/(4.,<S) is monotone in A'. 

2. There exists a translation (—)° : F0i(A,5) ^ F0iM0N^/(^,5) such that a formula 
p £ F0i(^,5) is monotone in A! if and only if p ^ p°. 

Proof. In IGFVZld"^ IGFVZ14b] this result is proved for unsorted FOi. It is not difficult to 
adapt the proof for multi-sorted FOEi. Intuitively, if we assume that p is in negation normal 
form, the translation is defined as p° := p\-^a{x) i—> T | a G A']. □ 

Gombining the normal form theorem for FOi and the above lemma, we obtain the fol¬ 
lowing corollary providing a normal form for the monotone fragment of FOi. 

Corollary 4.21. Let p £ FOi(4., 5), the following hold: 
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(i) The formula ip is monotone in A' Q A iff it is equivalent to a formula in the basic form 
V As ^Fo(^’^)s some types S,n C pA, where 

V^o(S>n)s := /\ 3x:s.r/(x) A Vx:s. \/ r^'(x). 

5es Sen 

(a) The formula ip is monotone in all a ^ A (i.e., ip € F0^(^,5)J iff p is equivalent to a 
formula in the basic form \/ /\^ VpQ(S,n)s for some types S,n C pA, where 

Vpo(S,n)s := 3x:s.r_^(x) A Vx:s. \J t ^{ x ). 

Se'E Sen 

The following stronger normal form will be nsefnl in the next section. 

Proposition 4.22. In the above normal form we can assume that every conjunct VpQ(S,n)s 
is such that for every pair of distinct S,S' €zTi at least one of the following conditions hold: 

• or 

• SAA'%S'AA'andS'r^A'%SI^ A'. 

Proof. Assnme that for some distinct S,S' G S neither of the conditions hold. That is, 
S n{A\A') = S' n{A\ A') and either (1) 5 n A' C 5' n A' or (2) S'n A' C S n A'. It is 
easy to observe that if (1) holds then Tg/(x) ^ Xg'{x) and if (2) holds then Tg'(x) \= r^/(x). 
Therefore we get that V^o(S,n)3 = V^o(S \{5}, n)^ and V^o(S,n)3 = V^o(S \ {S'}, n)s 
respectively. □ 

4.2.2 Monotone fragment of FOEi 

Theorem 4.23. A formula of FOEi(A,iS) is monotone in A' C A iff it is equivalent to a 
sentence given by 

ip ::= V’ I o,{x) I 3 x\s.ip \ Vx.ip | (/5 A (/5 | 99 V (/? 

where a € Af, s G S andfi G EOEi(A\A', S). ITe denote this fragment as FOEiMOHa'{A, S). 
The resnlt follows from the following lemma. 

Lemma 4.24. The following hold: 

1. Every ip G EOEiMON^/(A,<S) is monotone in A'. 

2. There exists a translation (—)° : EOEi(A,S) —?> EOEiMONyi/(A, S) such that a formula 
p G E0Ei(A,5) is monotone in A' if and only if p = p°. 

Proof. In |CEVZ14al ICEVZlTb] this resnlt is proved for unsorted EOEi extended with gen¬ 
eralized qnantifiers. It is not difhcnlt to adapt the proof for mnlti-sorted EOEi. Intnitively, 
the translation is defined as p° := p[-^a{x) 1 —>■ T | o G A']. □ 

Combining the normal form theorem for EOEi and the above lemma, we obtain the 
following corollary providing a normal form for the monotone fragment of EOEi. 

Corollary 4.25. Given p G EOEi (A, S), the following hold: 
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(i) The formula m is monotone in A' C. A iff it is equivalent to a formula in the basic form 
VAsV^OE(T,n)s where 

VFOE(T,n)s := 3x:S!.(difF(x) AA V 2 ;:s!.(diff(x,z) ^ \/ t^'{z))). 

i Sen 

and for each conjunct there are T and IT satisfying Ti G p(A) and IT C T, 

(a) The formula ip is monotone in all a ^ A (i.e., p G FOE]''(yl)J iff it is equivalent to a 
formula in the basic form \/ /\g VpQ£(T,n)s where 

V^QE(T,n)s := 3x:S!.(diff(x) AA Vz:S!.(diff(x, z) \J r^(z))). 

i Sen 

and for each conjunct there are T and IT satisfying Ti G p{A) and IT C T. 

(Hi) Over strict one-step models the above normal forms hold with S replaced by s. 

4.3 One-step additivity 

Before stating the main definitions we need to introduce some useful notations. Given a 
valuation V : A ^ pD, elements a G A^ and X = {Xi,... ,Xn) G p{D)^, we introduce the 
following notation: 

y(a) := V{ai),...,V{an) 

F[a i-G X] ;= V[ai Xi \ 1 < i < n] 

y[atX] ;= V[ai ^ ^( 0 *) n | 1 < i < n]. 

We are now ready to state the main definition of this section. 

Consider a one-step logic C{A) and formula p G T.{A). We say that p is completely 
additive in {ai,...,an} C X if is monotone in every Oi and, for every one-step model 
(D, V) and assignment g : iVar ^ Z), 

If {D,V),g \= p then (Z), I/[a|'Q]), (/ |= p for some quasi-atom Q of F(a), 

where a := ai,..., o^. It will be useful to give a syntactic characterization of additivity for 
several one-step logics. 

4.3.1 Completely additive fragment of FOi 

Definition 4.26. The fragment of F0i(X,5) completely additive m. A' Q A is given by the 
sentences generated by the following grammar: 

p ::= '0 I o^ix) I 3x:s.(/? \ pH p \ p Af) 

where a G A', s € S and 0 G FOi(yl \ A',S). We denote this fragment as FOiADDyi'(X, 5). 

Theorem 4.27. A formula ofFOi{A,S) is completely additive in A' C. A iff it is equivalent 
to a sentence 0 /FOiADD^/(yl, 5). 

The theorem will follow from the next two lemmas. 

Lemma 4.28. If p G FOiADD^/(yl, 5) then p is completely additive in A'. 
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Proof. First observe that (p is monotone in every a d A' hy Theorem 14.191 We show, by 
induction, that any one-step formula ip in the fragment (which may not be a sentence) 
satisfies, for every one-step model {D, V : A ^ pD), assignment g : iVar —>■ D, 

If {D,V),g \= ip then {D,V[A' \Qi\),g \= ip for some quasi-atom Q of V{A'). 

The cases are as follows: 


• If = '0 G FOi (74 \ A') changes in the A'-part of the valuation will make no difference 
and hence the condition is trivial. 

• Case ip = ai{x) with Oj G A'-, if (Zl, V),g \= ai{x) then g{x) G V{ai). If we take Q to 
be an atom of V{A') such that Qi := {g{x)} it is clear that g{x) G IZ[A'['Q](aj) and 
hence {D,V[A'\Q]), g \= ai{x). 

• Case ip = ipi V ip 2 '. simply apply the inductive hypothesis to one of the disjuncts. 

• Case ip = ipi A fj: assume {D,V),g \= ip. By induction hypothesis we have that 

{D,V[A' IQ]), g ^ ipi for some Q. Observe that {D,V),g \= ip and as ip is ^'-free we 
also have {D,V[A' \Q]), g |= Therefore we can conclude that (H, (Q]), 17 |= ip. 

• Case ip = 3x:s.ip': assume {D,V),g \= ip. By definition there exists d & D such that 

{D,V),g[x !->■ d] 1= ip'. By induction hypothesis (Zl, C[^'('Q]), g'[x t-A- d] \= ip' for some 
Q. Therefore we can conclude that {D,V[A' \Q]), g \= 3x:s.ip'. □ 

Lemma 4.29. There exists a translation (—)^ : FOiMON^/(A,5) —FOiADD^/(A,5) such 
that a formula ip G FOiMON^/(j4,<S) is completely additive in A' if and only if ip = ip^. 

Proof. We assume that ip is in basic normal form, i.e., ip = \/ /\^ VpQ(S,n)s where S C 11. 
First, we intuitively consider some conditions on subformulas of ip that would force V{A') to 
have more than one element and, in particular, not be a quasi-atom. Clearly, any formula 
that forces this, goes against the spirit of complete additivity. 

(i) /\g VpQ(S,n)s with Ssj and Sgj such that a G and b G Sgj for a,b & A'. 

(ii) Vpq(S, n)s with a,b € S (1 S' for distinct a,b € A' or distinct S, S'. 

(hi) n)s with UnA' ^0. 

Now, we give a translation which eliminates (replaces with T) the subformulas satisfying any 
of the above cases. We first take care of case |(i)| with the following definition 

(V A^Fo(S,n)3)^ := \/{f\V^o{^,U)P I (i) is not the case} 


and we take care of the remaining cases as follows 


v^o(s,n)^ := 


'^FO 


(s,n 




if (ii) holds, 
otherwise. 


where 11^, := {S G II | A' n 5 = 0}. 

From the construction it is clear that G FOiADD^/(A, iS) and therefore the right- 
to-left direction of the lemma is immediate by Lemma 14.281 For the left-to-right direction 
assume that p is completely additive in A', we have to prove that {D, V) \= p'A^ {D, V) \= p^, 
for every one-step model {D, V). Moreover, using Remark 14.51 we will assume that {D, V) is 
a strict one-step model. 
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I I Let (D, V) \= . It is enough to show that for every conjunct, if (D, V) ^ Vpq(S, H^,) 

then (Z), V) \= VpQ(S,n). The key observation is that C IT. 


I I Let {D,V) \= pi. To prove this direction we make a slight detour: first, it is not difficult 
to prove that (D, V) =fo {D x {0, 1}, 14) where D x {0, 1} := x {0, 1},. .. , x {0, 1} 
and 14(a) := {{d,k) \ d € V{a),k G {0,1}}. Therefore, to prove this direction it is enough 
to show that (D x {0,1}, 14) |= P^- 

By complete additivity in A' we have that {D x {0,1}, 14 (Q]) \= P for some quasi-atom 

Q of 14(^0- To improve readability we define := 14[44Q] and Dqi := D x {0,1}. We 
now work with {Dqi, V^) because (by monotonicity) it will be enough to prove (Doi, V^) \= p^ 
to obtain (-Dqi, 14 ) |= p‘^. 

As (ZZqi,!^) 1= p^ we know there is some disjunct /\g VpQ(S,n)s of p witnessing the 
satisfaction. First, we prove that this disjunct is preserved by the translation. 

Claim 1. The disjunct /\g VpQ(S,n)s does not satisfy case (i) 

Proof of Claim. Suppose that for this disjunct there are two conjuncts corresponding to 
sorts Si and S 2 such that a G and b G Sgj for a,b d A'. As the sorts are disjoint, this 
implies that there should be two distinct elements colored by elements of A'. However, as 
Vl{A') is a quasi-atom, this cannot be the case. ◄ 


From the above claim it follows that, for the previously fixed disjunct, there is at most 
one sort (i.e, one conjunct) which can possibly A' in the existential part (that is, in S). 
Hence, the disjunct is (so far) preserved by the translation. We still have to check that 
every conjunct is preserved, that is, we now focus on cases (ii) and (iii) We fix an arbitrary 


conjunct VpQ(S,n)s and prove the following claim. 

Claim 2. For every 6, b' G A' and S', S'' G S, if Z G S' and b' G S' then b = b' and i = j. 


Proof of Claim. Assume, towards a contradiction, that one of the following cases hold: 

(1) There are distinct b, b' G A' such that b,b' £ S U S' for some S, S' G S. 

(2) There is 6 G A' such that 6 G S C S' for some distinct S, S' G S. 

Case (1) would require both V^{b) and lC(Z') to be nonempty, which does not hold, as 
lA(A') is a quasi-atom. For case (2) observe that, by Proposition 14.221 we have to consider 
the following two subcases: 


(2a) sn (A\ A') 4 s'n (A\ A'). 

( 2 b) s n A' 4 S' n A' and S' n A' 4 s n A'. 

For the subcase (2a) note that if elements ds,ds' G Dqi satisfy {ds) and {ds') then 
ds 7 ^ ds' must hold. This would be absurd since at most one element is colored with b 
(because lA(A') is a quasi-atom) and hence the existentials wouldn’t be satisfied, because 
they require at least two distinct elements to satisfy h{x). 

The subcase (2b) is slightly more subtle: for this case to hold, we must have distinct 
6 i, 62 £ A' such that bi £ S and 62 £ S'. The situation is now like case (1), which we already 
worked out. Therefore this finishes the proof of the claim. ◄ 


To finish, we show that condition (iii) is taken care of. 

Claim 3. If (Dqi, v;) 4 v^o( 5 ^>n )3 then {Doi,v;) 4 v^o(s>n 4 ) 3 . 
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Proof of Claim. The existential part is trivial. For the universal part suppose, without 
loss of generality, that some element (d, 0) has type G 11. If 5 n ^4' = 0 we are done, 
since in that case Sq G H^,. Suppose now that S'o H A' ^ 0. The two key observations are 
(1) because of how 14- was defined, and because Vl{A') is a quasi-atom, the type G IT 
of (d, 1) has to be exactly S\ = 5o H (^ \ A')] and (2) as we are considering ^'-positive 
types, element (d, 0) also satisfies Si. From this two observations we can conclude that every 
element (d, i) satisfies some type in H^,. ◄ 

This finishes the proof. □ 

Putting together the above lemmas we obtain Theorem 14.271 Moreover, a careful analysis 
of the translation gives us normal forms for the completely additive fragment of FOi. 

Corollary 4.30. Let (f G FOi(A, 5), the following hold: 

(i) The formula gp is completely additive in A' C A iff it is equivalent to a formula in the 
basic form y f\^VpQ{Ti,lVjs where T,,Il C p{A) and for every disjunct 

1. At most one sort s G <S may use elements from A' in VpQ(S,n)s, 

2. For Vpq{T,,II)s we have that n is A'-free and, if Lj] G A* is the list with repetitions 
of elements of A in S, then there is at most one element of A' in Lji. 

(a) If tp is monotone in A (i.e., p G FO^(74,5)J then p is completely additive in A' <Z A 
iff it is equivalent to a formula of the form \/ /\^ VpQ(S,n)s where S,n C p{A) and 
for every disjunct /\^ VpQ(S,n)s, 

1. At most one sort sGS may use elements from N in VpQ(S,n)s, 

2. For Vpq(S, n)s we have that 11 is A'-free and, if G A* is the list with repetitions 
of elements of A in S, then there is at most one element of A' in Ly,. 

4.3.2 Completely additive fragment of FOEi 

Definition 4.31. Given A' C A, the fragment FOEiADD^/(^, 5) of EOEi(74,5) is given by 
the sentences generated by the following grammar: 

p ::= y I a{x) \ 3x:s.p {pyplpAtp 

where a G A', s G 5 and if G FOEi(d \ A', S). Observe that the equality is included in ij. 

Theorem 4.32. A formula o/EOEi(d., 5) is completely additive in A' C A iff it is equivalent 
to a sentence in FOEiADD^/(T, 5). 

The theorem will follow from the next two lemmas. 

Lemma 4.33. Every p G FOEiADD^'(A., 5) is completely additive in A'. 

Proof. The proof is the same as for Lemma 14.281 fcomplete additivity for FOi). □ 

Lemma 4.34. There exists a translation (—)^ : FOEiMON^'(T,<S) —FOEiADDa/(A,5) 
such that a formula p G FOEiMON^/(A., 5) is completely additive in A' if and only if p = p^. 

Proof. We assume that p is in basic form, i.e., p = \/ /\g VpQp(T, n)s with 11 C T. First, 
we intuitively consider some conditions on subformulas of p that would force the existence 
of at least two elements colored with A'. Clearly, any formula that forces this, goes against 
the spirit of complete additivity: 


32 






(i) Some /\g VpQg(T, n)s has Ts^ and Tsj with a € Ts^ and b G Tsj for a,b G A', Si / 52- 
(h) For any VpQp(T, n)s there are a, 6 € Tj n Tj for distinct a,b & A' or distinct i,j. 

(hi) For any VpQp(T, 11)s we have Un A' ^ 0. 

Now, we give a translation which eliminates (replaces with _L) the subformulas satisfying any 
of the above cases. We first take care of case |(i)| with the following definition 

(V A Vfoe(T, n)s)^ := Via Vfoe(T, n)f I (i) is not the case} 
s s 


and we take care of the remaining cases as follows 


V^OE(T,n)f := 


'^FOE 


if (ii) holds, 


(T,n 


A')s 


otherwise, 


where II^, := {5 G II | A' fl S' = 0 }. 

First we prove the right-to-left direction of the lemma. Inspecting the syntactic form of 
(p‘^ and using Lemma 14.331 it is not difficult to see that G FOEiADDyi/( 74 ,<S). For the 
left-to-right direction of the lemma we assume cp to be completely additive in A! and have to 
prove (p = . 

I I Assume {D,V) ^ (p^. It is enough to show that (D,V) \= V}i^^p(T, n^,)s implies 
{D, V) \= VpQp(T,n)s for every conjunct. The key observation is that 11^, C II. 

I => I Let (D, V) \= (p. By complete additivity in A' we have that {D, IL[A'|'Q]) |= (p for some 
quasi-atom Q of V{A'). To improve readability we define V := IL[A'|'Q]. We now work with 
{D, V') because (by monotonicity, which is implied by complete additivity) it will be enough 
to prove that (L), V) \= ip^. 

As {D,V') \= p, we know there is some disjunct /\g VpQp(T, n)s of p witnessing the 
satisfaction. First, we prove that this disjunct is preserved by the translation. 

Claim 1. The disjunct /\g VpQp(T, n)s does not satisfy case (i) 

Proof of Claim. Same as in Claim [T] of Lemma [4.291 ◄ 


From the above claim it follows that, for the previously fixed disjunct, there is at most one 
sort (i.e, one conjunct) which can possibly use A' in the existential part (that is, in T). 
Hence, the disjunct is (so far) preserved by the translation. We still have to check that 
every conjunct is preserved, that is, we now focus on cases (ii) and (iii) We fix an arbitrary 


conjunct VpQp(T,n)s and prove the following claim. 

Claim 2. For every 6, b' G A', if 6 G Tj and b' G Tj then b = b' and i = j. 


Proof of Claim. Suppose that there are distinct Tj,Tj G T such that 5 G Tj n Tj. This 
would require at least two distinct elements to satisfy b{x). However, this cannot occur 
because V'{A') is a quasi-atom. The case where b ^ b' \s handled in a similar way: suppose 
that b G Tj, b' G Tj and b ^ b'. Using what we just proved, let us assume that i = j. 
Therefore, this requires the existance of an element which is colored with both b and 
However, as V'{A') is a quasi-atom, this cannot occur if 6 7 ^ b'. ◄ 


To finish, we show that condition (iii) is taken care of. 
Claim 3. If (T, W) ^ V^oE(T,n)s then (T, W) ^ 
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Proof of Claim. Assume {D,V') ^ VpQg(T,n)s and that d G D is one of the elements 
which is not a witness for T; therefore, d has to satisfy some type G IT. If 5^ H A' = 0 
we are done, because in that case Sd G Suppose that H A' ^ 0, this means that d 
is colored with some a G A'. As V'{A') is a quasi-atom, this means that no other element 
can be colored with A'. The final observation is that, as 11 C T, then Sd G T. This means 
that there should exist an element d' ^ d which is colored with the same a G A' but we have 
just observed that this cannot occur. We conclude that every d & D has to satisfy some type 
S' G n with S n A' = 0. ◄ 

This finishes the proof. □ 

Putting together the above lemmas we obtain Theorem 14.321 Moreover, a careful analysis 
of the translation gives us the following corollary, providing normal forms for the completely 
additive fragment of FOEi. 

Corollary 4.35. Let ip G FOEi(A), the following hold: 

(i) The formula ip is completely additive in A' C A iff it is equivalent to a formula in 
the basic form \/ /\g VpQp(T, n)s where T G p{A)^, 11 C T and for every disjunct 
AsV^oE(T,n)s, 

1. At most one sort S G S may use elements from A' in VpQp(T,n)s, 

2. For VpQp(T,n)s we have that 11 is A'-free and there is at most one element of 
A' in the concatenation of the lists Ti-T 2 - ■ -T^. 

(a) If ip is monotone in A (i.e., if € FOEj''(A)J then ip is completely additive in A' C A 
iff it is equivalent to a formula in the basic form \/ /\g VpQp(T, n)s where T G p(A)^, 
n C T and for every disjunct /\g VpQp(T, n)s, 

1. At most one sort S G S may use elements from A' in VpQp(T,n)s, 

2. For VpQp(T,n)s we have that 11 is A'-free and there is at most one element of 
A' in the concatenation of the lists Ti-T 2 - ■ -Tk- 

(Hi) Over strict one-step models the above normal forms hold with S replaced by s. 

4.4 One-step multiplicativity and Boolean duals 

Consider a one-step logic C{A) and formula ip G T{A). We say that ip is completely multi¬ 
plicative in {ai,... ,a,i} C A if p is monotone in all a* and for all one-step models {D, V) 
and assignments g : iVar —)■ D, 

If (D, V),g ^ ip then (D, W[a|"Q]), <7 ^ ip for some quasi-atom Q of W^(a) 

where a := ai,...,an and V^{b) := D \ V{h) for all b € A. Observe that, already with 
the abstract definition of Boolean dual given in Definition 12.81 we can prove the expected 
relationship between the notions of additivity and multiplicativity. 

Proposition 4.36. A formula p G C{A) is completely additive in A' A if and only if p^ 
is completely multiplicative in A'. 

Proof. We prove the left to right direction: 

{D,V)^p^ ( 1 ) 

iff (D, W) 1 = p fDefinition 12.81) 

iff {D, I/'^[A' jQ]) 1= p, for some quasi-atom Q of V^{A'). [p completely additive) 
The proof of the other direction is analogous. □ 
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To define a syntactic notion of multiplicativity we first give a concrete definition of the 
dualization operator of Definition 12.81 and then show that the one-step language FOEi is 
closed under Boolean duals. 

Definition 4.37. Let (/? G FOEi(^,<S). The dual G FOEi(^,<S) of p) is defined as follows. 


:= a{x) 



(T)‘ ;= ± 


= T 

{x x^y 

{x 96 yf 

= x^y 

{p A tjj)^ := p^ V 

{pPipf 

= p^ A 

(3x:s.';/’)^ := \/x:s.fj^ 

(ffx'.S.'lfY 

= 3x:s.fj^ 


Remark 4.38. Observe that if G F0i(A,5) then G FOi(A, 5) and that the operator 
preserves positivity of the predicates. That is, if (/? G FOE^(A,iS) then G FOE^(^,iS) 
and the same occurs with FO^(74,5). 

The proof of the following Proposition is a routine check. 

Proposition 4.39. The sentences p and p^ are Boolean duals, for every p G FOEi(A, 5). 

We are now ready to give the syntactic definition of a completely multiplicative fragment 
for the one-step logics into consideration. 

Definition 4.40. Let ^ be a set of names. The syntactic fragments of FOEi(A, 5) and 
FOi(^,iS) which are completely multiplicative in C ^ are given by 

FOiMUU/(A‘5) := {p\p^ e FOiADDa'(A>5)} 

F0EiMUU/(A,5) := {p \ p^ ^ FOEiADDa'(A5)}. 

Proposition 4.41. A formula p G FOEi(^,>S) is completely multiplicative in A' C A if and 
only if it is equivalent to some p' G FOEiMUL^/(74,5). 

Proof. This is a consequence of Proposition 14.361 Theorem 14.321 and Definition 14.401 □ 

4.5 Effectiveness of the normal forms 

In the following corollary, we briefly show that for any formula of FOi and FOEi we can 
effectively compute its normal form. Moreover, if the formula is monotone we can also com¬ 
pute its monotone normal form ( cf. Corollary 14.211) . The same holds for complete additivity 
and complete multiplicativity. 

Corollary 4.42. For every tp G FOi(A., 5) and p G FOEi (A., 5) we can effectively calculate 
its normal form, monotone normal form, completely additive normal form and completely 
multiplicative normal form. 

Proof. We only show the corollary for the normal form of arbitrary formulas of FOEi and, 
as an example, the normal form for completely additive formulas of FOEi. The other cases 
are similar left to the reader. 

According to Theorem 14.181 every p G FOEi (A, 5) is equivalent to a formula of the form 
V As^FOE(T,n)s where for each conjunct T G p{A)^ for some k and 11 C T. We non- 
deterministically guess the number of disjuncts and parameters k, 11 and T for each conjunct 
and repeatedly check wether the formulas p and \/As ^foe(T, Iljs are equivalent. This 
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check can be done because FOEi is decidable: in |Beh221 ILowl5] it is proved that unsorted 
FOEi is decidable. Multi-sorted EOEi can be reduced to unsorted EOEi by introducing new 
predicates for the sorts (a standard trick). 

Next, we also want the formulas which are completely additive to be in their corresponding 
normal form given by Corollary 14.351 What we do now is to apply the translation (—)'^ of 
Lemma 14.341 to every formula and keep only those that satisfy that ip = ip^. The set A! ^ A 
in which the formula p> should be completely additive is guessed non-deterministically as well, 
we keep the biggest set. 

The same procedure can also be performed to get normal forms for completely multiplica¬ 
tive formulas, with additional dualization steps. □ 

5 Additive-weak parity automata 

In this section we formally define the additive-weak automata discussed in the introduction 
(Section [1]). We start by introducing the concept of weak automata, together with some 
intuitions, and then move towards the dehnition of additive-weak automata. 

Definition 5.1. Let T be a one-step language, and let A = (A, A,0,o/) be in Aut{C,P). 
Given a,b & A, we say that there is a transition from a to 6 (notation: a b) if b occurs in 
A(a, c) for some c € p(P). We let the reachability relation ^ denote the reflexive-transitive 
closure of the relation 

We say that 14 is a weak parity condition, and A is a weak parity automaton if we have 

(weakness) if a ^ 6 and h < a then 14(o) = 14(6). 

The intuition is that every run of a weak automaton A stabilizes on some strongly con¬ 
nected component C after hnitely many steps, and therefore the only parity seen inhnitely 
often after that point will be the parity of C. Moreover, as only one parity can be repeated 
inhnitely often, the precise number does not matter; only the parity does: 

Fact 5.2. Any weak parity automaton A is equivalent to a weak parity automaton A' with 
: A' ^ {0,1}. From now on we assume such a map for weak parity automata. 

If we think about trees, the leading intuition is that weak parity automata are those 
unable to register non-trivial properties concerning the ‘vertical dimension’ of input trees. In 
some sense, they can only describe properties of well-founded (and co-well-founded) subsets 
of trees. Indeed, in |MSS92) it is shown that on trees with bounded branching weak automata 
characterize weak MSO (WMSO). However, if the branching of the tree is not bounded, the 
story is quite different, since an extra ‘horizontal’ constraint is required to capture WMSO. 
We refer to |FVZ131 IZa,n121 ICFVZ14bl ICFVZ14a,] for more details. 

We now turn to the second condition that we will be interested in, viz., additivity. Intu¬ 
itively, this property expresses a constraint on how much of the ‘horizontal dimension’ of an 
input tree the automaton is allowed to process. First we formulate our additivity condition 
abstractly in the setting of Aut{C). Given the semantics of the one-step language £, the 
(semantic) notion of additivity/multiplicativity applies to one-step formulas (see for instance 
Section OD . We can then formulate the following requirement on automata from Aut{C)'. 

(additivity) for every maximal strongly connected component C C A, states a, 6 € C and 
color c € p(P): if 14(6) = 1 then A(a, c) is completely additive in C. If 14(6) = 0, then 
A{a,c) is completely multiplicative in C. 
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Intuitively, the additivity restriction has the following effect: while a run of an additive 
automaton stays inside a connected component with parity 1, we can assume without loss 
of generality that the nodes of the tree coloured with some state of C form a path in the 
tree. The reason being that at each step -because of complete additivity- player 3 can play 
a valuation where at most one node is colored with C. Therefore, if V chooses the element 
coloured by C, a repetition of this step will define a path. 

For the automata used in this article we need to combine the constraints for the horizontal 
and vertical dimensions, yielding automata with both the weakness and additivity constraints. 
The intuition is that we want to define a class of automata that works with finite paths. 

Definition 5.3. An additive-weak parity automaton is an automaton A G Aut{C) addition¬ 
ally satisfying both the (weakness) and (additivity) conditions. We let Autyja{h^) denote 
the class of such automata. 

Observe that, so far, the additivity condition has been given semantically. However, 
given that the one-step languages that we are interested in have a syntactic characterization 
of complete additivity (see for example Theorem 14.321) we will give concrete definitions of 
these automata that take advantage of the mentioned characterizations. 

Definition 5.4. The class Aut^a(FOEi) of automata is concretely given by the automata 
A = {A, A,kl,ai) from Auf(FOEi) such that for every maximal strongly connected compo¬ 
nent C C and states a,b (z C the following conditions hold: 

(weakness) H(a) = H(6), 

(additivity) for every color c G p(P): 

If H(a) is odd then A(a, c) G EOE^ADDc(A), otherwise 
if H(a) is even then A(a, c) G EOE^MULc(A). 

In the following sections we analyze certain closure properties of Autwa(FO^i) in the class 
of strict trees. Namely, closure under Boolean operations and under (weak chain) projection. 
We start with the latter. As usual, to prove the closure under projection we first prove a 
simulation theorem. 

5.1 Simulation theorem 

One of the main technical results for parity automata is the so-called “Simulation Theorem”: 

Theorem 5.5 ( |Wal96[ IWal02] l. Every automaton A G Aut(EOEi) is equivalent (over all 
models) to a non-deterministic automaton A' G At(t(FOEi). 

Very informally, an automaton A is called non-deterministic when in every acceptance 
game gI(A, S), if V can choose to play both (a, s) and (b,s) at a given moment, then a = h. 
That is, V’s power boils down to being a pathfinder in S. He chooses the elements of S 
whereas the state of A is ‘fixed’ by the valuation played by 3, for every given s. For a formal 
definition we refer the reader to Definition 12 and Lemma 19-20 in |Wal96| . 

To get a better picture of what non-determinism means, it is good to do the following: 
first observe that if we fix a strategy / for 3 for the game ^(A, T) then the whole game can 
be represented by a tree, whose nodes are the different admissible moves for V. We assume 
that the automaton is clear from context and denote such a tree by Tj. Figure |4] shows the 
move-tree for V for some fixed strategy / for 3. Each branch of Tf represents a possible 
/-guided match. 
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soo soi sio sii (as, sqo) (qi, gpo) (qi, fiio) (as, ■sio) (ai,sii) 

Figure 4: A tree T and Tf for a fixed strategy for 3. 


Observe that in this hgure the chosen strategy for 3 is not non-deterministic. The ad¬ 
missible moves which violate this condition are underlined. On trees, the notion of non- 
deterministic strategy can be rephrased as “every element s € T occurs at most once as an 
admissible move for V.” 

Remark 5.6. The terminology “non-deterministic” may seem confusing, given that A' is 
certainly more “deterministic” than A (from the point of view of V.) However, the terminology 
is sensible when seen from the following perspective: we say that a hnite state automaton (on 
words) is deterministic when the next state is uniquely determined by the current state (and 
the input); on the other hand, they are called non-deterministic when 3 can choose between 
different transitions, leading to the next state; hnally, alternating hnite state automata are a 
generalization where the next state is chosen by a complex interaction of 3 and V. Going back 
to parity automata, the above theorem then says that every alternating parity automaton is 
equivalent to a non-deterministic automaton. In light of our brief discussion, it should be 
clear that non-deterministic automata are “more deterministic” than alternating automata. 

Unfortunately, the transformation performed by Theorem 15. 5 1 does not preserve the weak¬ 
ness and additivity conditions (see |Zanl21 Remark 3.5]), and therefore does not give us 
non-deterministic automata for the class A?xt^a(FOEi). 

In this section we provide, for every automaton A € AMt^a(FOEi) and p E P, an au¬ 
tomaton Aj E Aut^a(FOEi) which, although not being fully non-deterministic, is specially 
tailored to prove the closure of Antu,a(FOEi) under hnite chain projection. The state space 
of the construction Aj E Autyja(EOEi) will be the disjoint union of two parts: 

• A non-deterministic part based on p(A); and 

• An alternating part based on A. 

The non-deterministic part will basically be a powerset construction of A, and contain the 
initial state of the automaton. It will have very nice properties enforced by construction: 

• It will behave non-deterministically, 

• The parity of every element will be 1 (trivially satisfying the weakness condition); and 

• The transition map of every element will be completely additive in p(A). 

The alternating part will be a copy of A modihed such that it cannot be used to read nodes 
colored with the propositional variable p. The automaton A^ will therefore be based both on 
states from A and on “macro-states” from p(A). Moreover, the transition map of A^ will be 
dehned such that once a match goes from the non-deterministic part to the alternating part, 
then it cannot come back (see Fig. [5] for an illustration). Successful runs of A^ will have the 
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Figure 5: Two-part construction, initial state in red (illustrative) 

property of processing only a finite amount of the input being in a macro-state and all the 
rest behaving exactly as A (but without reading any p). 

The key property of Afi, which we will use to prove the closure under finite chain projec¬ 
tion, is that for every tree T and proposition p € P, the following holds: 

T 1= Afi iff TlpfAlp] 1= A for some finite chain Xp C T. 

This finishes the intuitive explanations and we now turn to the necessary definitions to 
prove the results. The first step is to define a translation on the sentences associated with 
the transition map of the original additive-weak automaton, which will aid us to define the 
transition map of the non-deterministic part. Henceforth, we use the notation to denote 
the set p{A). 

Definition 5.7. Let a € FOEj''(A, 5) be of the shape VpQg(T,n)s for some T G p{A)^ and 
n C T. We say that a' G FOEj’'(A*^ U A, 5) is a non-branching lifting of a if 

(i) of = VpQp(R, n)s for some R G p(A^ U A}^, 

(ii) For every i, either: (a) Ri = R, or (b) Tj 7 ^ 0 and R^ = {Tj}. 

(hi) Case (ii.b) occurs at most once. 

Consider now G FOEj*"(A, S) of the shape /\g 0 : 3 . We say that tp' G FOEj*"(A^ U A, S) is a 
non-branching lifting of tp A tp' = /\g Og and 

(i) For every S C 5, either: (a) Og = Os; or (b) Og is a non-branching lifting of ag- 

(ii) Case (i.b) occurs at most once. 

Observe that every such a' is completely additive in A^. 

Definition 5.8. Let A = (A, A, H, ai) G Aut^a(FOEi). Let c G p(P) be a color and Q G A^ 
be a macro-state. First consider the formula /\^gQA(a,c). By Corollary 14.251 there is a 
formula G FOEj^ (A) such that = AaeQ 0 ) and is in the basic form \/j pj 
where pj = /\g VpQp(T, n)g. We define 

I ?/) is a non-branching lifting of Pj}- 
j 

Observe that G FOEj^ (A^ U A) and 'I'q,c is completely additive in A^. The latter is 
because the non-branching liftings have this property, which is preserved by disjunction. 
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(a/, si) 



(os^so) (aijS!) 


(a/,s/) 

(ai,si) 



(a5,'Soo) {a3,sio) (ai,sii) (a3,sio) 

Figure 6: Functional and functional+non-branching strategies. 


We are finally ready to define the two-part construct. 


Definition 5.9. Let A = {A, A, n, aj) belong to Aut^a(FOEi, P') and let p be a propositional 
variable. We define the two-part construct of A with respect to p as the automaton A^ = 


, af) £ Autwc, 

CL 

O 

given by: 



AUA^ 

A^(Q,c) 


af ;= 

{«/} 


:= 

1 

G3' 

<1 

' If 

n^{a) := 

D(a) 


A(a, c 


if p G c, 


The next definition introduces some notions of strategies that are closely related to our 
desiderata on the two-part construct. 

Definition 5.10. Given an automaton A G Aut{C), a subset B C A of the states of A, and 
a tree T; a strategy / for 3 in ^(A, T) is called: 

• Functional in B (denoted ‘F in B\ for short) if for each node s G T there is at most 
one b £ B such that (b, s) belongs to Tf. 

• Non-branching in B (denoted ‘NB in B\ for short) if all the nodes of Tj with a state 
from B belong to the same branch of Tj. 

• Well-founded in B (denoted ‘WF in B\ for short) if the set of nodes of Tj with a state 
from B are all contained in a well-founded subtree of Tj. 

Before proving that the two-part construct satisfies nice properties we need a few propo¬ 
sitions. The following two lemmas show how to go from admissible moves in the two-part 
construct to the original automaton and vice-versa. 

Lemma 5.11 (functional to alternating). Given an automaton A G Auttt,a(FOEi), a macro¬ 
state Q G A^ and a color c G p(P) such that {D, Vq^c) N '^Q,c for some Vq^c ■ A^ijA —)■ p{D); 
there is U : A ^ p{D) sueh that 

(i) {D, U) \= A(a, c) for all a £ Q, 

(a) If d £ U(b) then d £ Vq^cib), or d £ Vq^dQ') for some Q' £ A^ sueh that b £ Q'. 

Proof. Define U : A ^ p{D) as 


Uib) := Vq^b) U U Vq,dQ'). 

beQ' 


40 



Recall that 


\ Ip is a non-branching lifting of 
j 

As a first step, let {D, Vq^c) |= ip where pj is a non-branching lifting of some (fj. 

Claim 1. {D,U) \= f\^^QA{a,c). 

Proof of Claim. We show that {D,U) \= ipj. This is enough because AaeQ A(a,c) = 
\J The only interesting case is that of the predicates in A^. Observe that in ip there 
can be at most one Q' € A^. If there are none then ^p = tpj and we are done. Suppose that 
Q'{x) occurs in ip, then /\{b{x) \ b G Q'} occurs in ipj in the same place. It is clear from the 
definition of V that if d G Vq^dQ') then d G U{b) for every b G Q'. ◄ 

It is direct from the claim that (D, U) \= A(a, c) for all a & Q. □ 

Lemma 5.12 (alternating to functional). Let K belong to Aut^a(FOEi), Q G A^ he a macro¬ 
state, and c G p(P) be a color. Let {Va^c ■ ^ p{D) \ a G Q} be a family of valuations 
such that {D,Va,c) N for each Q. Then, for every P T D with |P| < 1 there is a 

valuation Vq^c ■ ^ U A^ —>■ p{D) such that 

(Z) 

(a) If d € Vq,c(^) then d G Va,c{b) for some a € Q. 

(in) If d € Vq^dQ') then d G I4,c(b) for some a € Q, b € Q'. 

(iv) For every (a, s) G Zvq ^ we have that a G A^ iff s & P. 

Proof. We use an auxiliary valuation Vt : A ^ piD) defined as Vt{b) := UaeO ^a.,d^)- 
Claim 1. {D,Vt) ^ AaeQ^(«>c). 

Proof of Claim. Observe that for every a & Q, b £ A we have I4,c(&) ^ Vt{b) then by 
monotonicity we get that {D,Vt) |= A(a, c) for every a £ Q. < 


Define the valuation Vq^c ■ A U A^ —>■ p{D), using the alternative marking representation 
Vq D ^ p{A U A^), as follows: 



Vhd) 

{vhd)} 


ifd^P, 

if d G P. 


and recall that AaeQ ^ Vi Ti 


:=VViV I i/i is a non-branching lifting of Pj}- 
j 

Assume that {D, Vt) \= Pj, we show that {D, Vq^d) |= V for some non-branching lifting of pj. 
If P is empty then Vq^c = Vt and as pj is itself a non-branching lifting of pj and {D, Vt) \= pj, 
we can conclude that {D, Vq^d) \= Pj and we are done. 

If P = {d} we proceed as follows: first recall that the shape of pj is pj = As ^foe('^’ ^)s- 
Let Srf C 5 be the set of sorts to which d belongs. We show that (P, Vq,c) |= for some 
non-branching lifting zp^d of n)sd- This will be enough, since it is easy to show that 

in that case zp := A As^s^ ^foe(T) n)s is a non-branching lifting of pj (by Definition 15.71) 

and (P, Vq,c) 1= V- _ 

Our hypothesis is that {D,Vt) ^ VpQj.(T, n)s^, which gives a full description of the 
elements of P with sorts S^. Namely, if we restrict to the elements of sorts S^, then: 
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• There are di,... ,dk € D such that di has type Tj, 

• Every d' ^ D which is not among di,... ,dk satisfies some type in 11. 

We consider the following two cases: 

(1) Suppose that d = di for some i; without loss of generality assume that i = 1. In this case 

it is easy to see that {D, Vq^c) \= • • • 2^, n)s^, which is a non-branching 

lifting of V+oE(T,n)s,. 

(2) Suppose that d ^ di for all i. Then, d must have some type G 11. The key observation 

is that n C T. Hence, there is some Ti such that Ti = Sd. Observe now that if we 
‘switch’ the elements d and di we end up in case (1). □ 

Remark 5.13. Observe that, without loss of generality, 3 can always choose to play minimal 
valuations. That is, in a basic position (a, s) she plays a valuation V : A ^ p(R[s]) such 
that for every t G R[s] and a (z A, the element t belongs to H(6) only if it is strictly needed 
to make A(a, k(s)) true. That is, she plays valuations V such that 

If (H, H) 1= A(a, k:(s)) then {D,V[b V{b) \ {t}]) ^ A{a, k{s)) 

for all a,b (z A and t (zV(b). In what follows we assume that 3 plays minimal valuations 
and we call such strategies minimal. For more detail we refer the reader to |Zanl2[ Proposi¬ 
tion 2.13]. 

Finally we can state and prove the properties of the two-part construct. 

Theorem 5.14. Let A G Tut^a(FOEi, P'), p G P be a propositional variable, and T be a 
P'-tree. The following holds: 

1. Aj G AMt.uja(FOEi, P'). 

2. Every winning strategy for 3 in the game A{Aj,,T)@{af, sj) can be assumed to be 
functional, non-branching and well-founded in A^. 

3. Af accepts T iff A accepts T[p|'Ap] for some finite chain Xp C T. 

Proof. ([T]) The key observation is that is completely additive in A^. 

([2]) We treat the properties separately: 

• Functional in A^: Suppose that (a, s) is a position of an /-guided match where the 

proposed valuation V : A ^ p(i?[s]) is such that t G V(Q} and t G V{Q') for 
distinct Q,Q' G A^ and some t G R[s]. Let he a disjunct of witnessing 

{R£.^[s], ..., Ri^[s],V) \= 'Lq,c- As is a non-branching lifting, the element t has 
to be witness for exactly one type R = {Q"f with Q" G A^. As we assume that 3 plays 
minimal strategies then we can assume that t G V(Q") only, among A^. Therefore, t 
cannot be required to be a witness for both Q and Q' at the same time. 

• Non-branching in A^: This is direct from the syntactical form of ^q,c- Observe that 
in each disjunct, at most one element of A^ can occur. Assuming that 3 plays minimal 
strategies then she always proposes a valuation V where V{A^) is a quasi-atom. 

• Well-founded in A^: The game starts in A^ and, as the parity of A^ is 1, it can only 
stay there for finitely many rounds. This means that, as / is winning, every branch of 
Tf has to leave A^ at some finite stage. 
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dan S Let T' := T[p|'Xp] and therefore k' := k\p\Xj^. Given a winning strategy / for 3 in 
Q = ^(A, T)@(o 7 , s/) we construct a winning strategy for 3 in = A{A^,T)@{af, sj). 
We define it inductively for a match tt^ of . While playing tt^ we maintain a bundle (set) 
B of /-guided shadow matches. We use Bi to denote the bundle at round i. We maintain the 
following condition (:j:) for every round along the play: 

iff. If the current basic position in tt^ is of the form {Q,s) G x T, then (a) for every 
a £ Q there is an /-guided shadow match TTa £ B such that the current basic position 
is (a, s) £ A X T] moreover, (b) T'.s is not p-free. 

X2. Otherwise, (a) B = {vr} and the position in both and tt is of the form (a, s) £ A xT; 
and moreover, (b) T'.s is p-free. 

Intuitively, in order to simulate A with A^ we have to keep two things in mind: (1) A^ 
can only read p while it is in the non-deterministic part; and (2) every choice of V in ^ 
corresponds to a match that has to be won by 3; these parallel matches are kept track of in 
B and represented as a macro state in A^. Therefore, we want the simulation to stay in the 
non-deterministic part while we could potentially read some p in T' (condition ifl). Whenever 
there are no more p’s to be read, we can relax and behave exactly as A (condition \2). 

We only consider the case where T'.s/ is not p-free, and hence, Xp is non-empty. Otherwise 
it can be easily seen that 3 can win using the same strategy /. Assume then that T'.sj 
is not p-free. At round 0 we initialize the bundle B = with the /-guided match iTaj at 

basic position {ai,si). It is clear that (:j:l) holds. For the inductive step we divide in cases: 

• If (:j;2) holds we are given a bundle B = {vr} such that both vr^ and vr are in position 
(a, s) £ A X T. We define as / for this position. To see that this is an admissible 
move in vr^ observe that T'.s is p-free and therefore A^(a, k(s)) = A(a, k'{s)). Now it 
is V’s turn to make a move in vr^. By definition of A^, the formula A^(a, A(s)) belongs 
to foe}" (A) and hence the next position in vr^ will be of the form {a', s') £ AxT with 
T'.s' p-free. We replicate the move in the shadow match vr and hence (}2) is preserved. 

• If ({!) holds at round i of vr^ we are given /-guided matches Bi = (vTa^,... ,TTa^} such 
that for the current position {Q, s) £ A^ x T and for each a £ Q we have TVa £ Bi. For 
every match VTa, the strategy / provides a valuation 14 which is an admissible move 
in this match. Define P := {t £ i?[s] | T'.t is not p-free} and observe that, as Xp is a 
chain, P will be either a singleton or empty. Using Lemma 15.121 with P and {Va}a£Q 
we can combine these valuations into an admissible move in vr^. 

To prove that (}) is preserved we distinguish cases as to V’s move: first suppose that V 
chooses a position of the form (6, t) £ AxT. Because of Lemma I5.12l iil we know that 
t £ Vai{b) for some aj £ Q. That is, we can replicate this move in one of the shadow 
matches vTa^. We do that and set B = {T^aj} hence validating (}2a). To see that (}2b) 
is also satisfied observe that Lemma [5T2}iv) implies that T'.t is p-free. 

For the other case, suppose that V chooses a position of the form {Q',t) £ A^ x T. 
Similar to the last case, this time using Lemma I5.12l iiil. we can trace every b £ Q' 
back to some match vr;, £ Bi. We define nb-b as the match -Kb extended with V’s move 
(6,t). Finally we let Pj+i := {vrfe-6 | b £ Q'}, which validates (}la). To see that (}lb) is 
also satisfied observe that Lemma l5.12l ivl implies that T'.t is not p-free. 

Now we prove that is actually winning. It is clear that 3 wins every finite full /^-guided 
match (because the moves are admissible). Now suppose that an /^-guided match is infinite. 
By hypothesis the extension of p in T' is a finite chain, so after a finite amount of rounds 
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we arrive to an element s such that T'.s is p-free. This means -because of ($)- that the 
automaton stays in only for a finite amount of steps and then moves to A, at a position 
(a, s) which is winning for 3. From there on the match and tt are exactly the same and, 
as 3 wins vr (which is /-guided for a winning strategy /), she also wins vr^. 



Figure 7: F+NB mode (blue), alternating mode (red) and p (yellow). 

I => I Given a winning strategy for 3 in = A{A^,T)@{af, sj) we construct a winning 
strategy / for 3 in ^ = ^(A, T')@(a/, sj) where T' := T[p|'Xp] for some finite chain Xp C T, 
which we promptly define. Using Theorem 15.1411^ we assume that is functional, non¬ 
branching and well-founded in A^ and define the set Xp as follows: 

Xp := {s € T I {Q, s) G Tjf for some Q G A^}. 

The fact that is non-branching (in A^) makes Xp a chain, and well-foundedness makes 
it finite. As an illustration. Fig. [7] represents a possible tree Tjf where the path induced by 
positions of the form (Q, s) is drawn with a thicker stoke. 

Next, we define the strategy inductively for a match vr of G- While playing tt we maintain 
an /^-guided shadow match vr^. We maintain the following condition (J) for every round 
along the play: let (a, s) G A x T be the current position in tt, then one of the following 
conditions holds: 

:j;l. The current basic position in tt^ is of the form (Q, s) G A^ x T with a G Q, 

12. The current basic position in vr^ is also (a, s) G A x T. 

At round 0 the matches vr and vr^ are in position (a/, sj) and ({a/}, sj) respectively, therefore 
(fl) holds. For the inductive step we divide in cases: 

• If (:j;2) holds, the match tt is in position (a, s). For this position, we let / be defined 

as f^. Observe that it must be the case that p ^ k{s), otherwise 3 wouldn’t have an 

admissible move in tt^ . Given this, and assuming that 3 plays minimal strategies, 
3 can use the same in vr. It is easy to see that we can replicate V’s next move in 
the shadow match. 

• If (^1) holds, the matches vr and tt^ are respectively in position (a, s) and (Q,s) with 
a G Q. The strategy provides a valuation which is admissible in vr^. Using 
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Lemma 15.111 we can get a valuation U which is admissible in vr -see item (i). Suppose 
now that V chooses (6, t) as a next position in vr. Using Lemma IS.llf iii we know that 
either (a) t G V^{b) or, (b) there is some Q' G with b ^ Q' and t G V^{Q'). In 

both cases we have a way to replicate V’s move in and preserve (if). 

To see that / is winning we proceed similar to the other direction. □ 

Historical remarks and related results. The idea of a Simulation Theorem goes back 
to (at least) Safra |Saf88) and Muller and Schupp |MS95) . In the first case, Safra used 
an augmented state space to convert non-deterministic Biichi automata into deterministic 
automata. In the latter, Muller and Schupp also use an augmented state space to convert 
alternating tree automata to non-deterministic tree automata. 

The idea to use a two-part automata to preserve the weakness condition was introduced 
in |Zanl21 IFVZ13] . although the authors claim that some concepts were already present 
in |MSS92) . In |Zanl21 IFVZ13j the authors use an automaton based on p{A x A) and A with 
a non-parity acceptance condition. This automaton is then converted to a parity automaton 
with a standard trick. Using p{A x A) as the state space instead of p{A) is necessary to 
correctly keep track of infinite runs of the automata. The first explicit use of p{A x A) as 
the state space of such automata seems to be in |AN01[ Section 9.6.2]. 

Observe, however, that in the non-deterministic part of our constructions the parity is 
uniformly 1 and therefore therefore any infinite run which stays in that part will be a rejecting 
run. Using this observation, we give a slightly simpler construction based on p{A) and A. In 
this respect, the proofs are cleaner and we avoid a non-parity acceptance condition. 

The second critical element of this section is the enforcing of the additivity condition 
on the non-deterministic component. The core of this idea was developed in |CFVZ14bl 
ICFVZ14^ where it is applied for another notion called “continuity.” 

5.2 Closure properties 

Given an automaton A G Aut{C, P), we define the tree language recognized by A as the set of 
P-labelled trees T(A) given by 

T(A) := {T I A accepts T}. 

In this subsection we prove that the collection of tree languages recognized by the au¬ 
tomata of Aut^a(FOEi) is closed under the operations corresponding to the connectives of 
WCL, that is: union, complementation and projection with respect to finite chains. We start 
with the latter. 

5.2.1 Closure under projection 

In the following definition we give, for every automaton A G Auti„a(FOEi, P'l+){p}), the weak 
chain projection over p, denoted 3i„cp.A and belonging to Aut^a(EOEi, P'). The domain and 
transition function of the automaton 3y^cP-A. will be based on A^. 

Definition 5.15. Let A belong to Aiiti„a(EOEi, P' l±l {p}). We define the chain projection 
of A over p as the automaton 3^cP-^ ■= {A U A^, A^, {a/}) G Aut^(i(FOEi, P') given as 

follows, for every c G p(P0- 

:= n(a) A^(a,c) := A(a,c) 

:= 1 A3(Q,c) := 

where is as in Definition 15.81 
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The key observation to be made about the above definition is that is actually 

defined based on the two-part construction (see Definition 15.9p . The main change is that 
the non-deterministic part {A^) has been projected with respect to p. This can be observed 
in the definition of A^(Q,c). 

Definition 5.16. Let p ^ P' and L be a tree language of (P' l±l {p})-labeled trees. The finite 
chain projection of L over p is the language ^^cP-L of P'-labeled trees defined as 

3y^cP-L := {T I T[p I— > Xp] G L for some finite chain Xp C T}. 

Lemma 5.17. For each A G Auf^a(FOEi, P' l±) {p}) we have F{3wcP-A) = 3^cP-'T{A3). 

Proof. What we need to show is that for any tree T over p{P')'. 

3wcP-^ accepts T iff there is a finite chain Yp CT 

such that A accepts T[p i— Yp\. 

However, we will show that the following statement (§) holds: 

3i„cp.A accepts T iff there is a finite chain Xp C T 

such that Ap accepts T[p i— Xfi\ 

and then recover the result we want using the following claim. 

Claim 1. There is a finite chain Yp C T such that A accepts T\p i-A Yp] iff there is a finite 
chain Xp C T such that Kfi accepts T[p i—> Xp\. 

Proof of Claim. Recall that Theorem 15.14ll3l) states that 

A accepts T[p|’Z] for some finite chain Z C T iff Kf accepts T. (*) 

I => I Suppose that there is a finite chain Yp C T such that A accepts T[p i—>■ Yfi\ and define 
T' := T[p I—>■ Yp]. Observe now that T'[p|'lj,] = T'. Using the left-to-right direction of (|l]) 
with T = T' and Z = Yp, we get that A^ accepts T' = T[p i—)• Yp]. \ ^ | Suppose that there is 
a finite chain Xp C T such that A^ accepts T[p i—>■ Xfi\ and define T' := T[p i—>■ Xfi]. Using 
the right-to-left direction of (|lj) with T = T', we get that A accepts T'lpl'Z] for some finite 
chain Z CT. That is, there exists a finite chain Z FT such that A accepts T[p i-A Xp n Z]. 
As the intersection of two finite chains is again a finite chain, we can take Yp := Xp 0 Z and 
conclude that there exists a finite chain Yp such that A accepts T[p i-A Yp]. < 

We now turn to the proof of (§). 

I ^ I It is not difficult to prove that properties (fTl2]) in Theorem 15.141 hold for 3u,cP-A as 
well, since the latter is defined in terms of A^. Therefore we can assume that the given 
winning strategy /a for 3 in T)@(aj^, s/) is functional, non-branching and 

well-founded in A^. Functionality allows us to associate with each node s either none or a 
unique state Qs G A^ {cf. |Zanl21 Prop. 3.12]). We now want to isolate the nodes that 
treats “as if they were labeled with p”. For this purpose, let 14 be the valuation suggested by 
/b at a position {Qs,s) gA^xT. As is winning. Unmakes A^(Qs, «('§)) = VTk( 5 )u{p} 
true in R[.s]. We define 

Xp := {s G T I Qs is defined and (R[s],14) ^ 

The fact that /a is functional in A^ guarantees that Xp is well-defined; as the strategy is 
non-branching in A^ we get that Xp is a chain; finally, well-foundedness makes it finite. 
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Let T' := T[p I— >■ Xp], we show that we can give a winning strategy for 3 in the game 
= A{A^,T')@(af, sj). Actually, we show that := works, we do it by induction for 
a match of Q^. We keep a shadow match in §3 such that the following condition holds 
at each round: 

Both matches and are in the same position (q, s) € A U x T. (:j;) 

This condition obviously holds at the beginning of the games. For the inductive step let 
k' = k[p Xp] be an abbreviation for the coloring of T' and consider the following cases: 

• If the current basic position in 7 r_^ is of the form (a, s) € A x T: by definition of Xp we 
know that s ^ Xp, so p ^ k'(s) and hence k'{s) = k{s). As is winning in G3 we know 
that the suggested valuation Va,s is admissible in tt^, that is, (i?[s],I4^s) |= A(a,«:(s)). 
As k'{s) = «:(s), we can conclude that (i?[s],I4^s) \= A{a,K'{s)) and thus is also an 
admissible move in vr^. 

• If the current basic position in is of the form {Q,s) € A^ x T we let Vq^s be the 
valuation suggested by and consider the following cases: 

1. If p € k'{s): then by definition of Xp we have that (i2[s],VQ^s) |= As 

k'{s) = k{s) tt) {p} we have that Vq,s) |= 'I'k'(s)- This is, by definition of A_^, 

equivalent to (i?[s], Vq^s) |= A^{Q,k'{s)) and therefore Vq^s is admissible in 7 r_^. 

2. If p ^ ft:'(s): then (i?[s],VQ, 5 ) ^ V ^k( 5 )u{p} but (i?[s],VQ, 5 ) ^ ^k(6)u{p} 

hence it must be the case that \= As k'{s) = k{s), then 

(i?[s],VQ s) 1= = A^{Q,k'{s)) and therefore Vq,s is admissible in vr^. 

As the move by 3 is the same in both matches it is clear that we can mimic in the shadow 
match TT^ the choice of V in vr^, therefore preserving 

It is only left to show that this strategy is winning for 3. It is enough to observe that 7 r_^ 
and tt 3 go through the same basic positions and, as 3 wins tt^, she also wins 7 r_^. 

I I Given a winning strategy /_^ for 3 in := A{A^,T')@{af, sj) it is not difficult to see 
that the same strategy is winning for 3 in := A(3^cP-A, T)@(a^, s/). As before, we can 
maintain the following invariant between a match of Q3 and a shadow match vr.^ of Q^: 

The matches 7 r_^ and vr^ are in the same position (q, s) € A U A^ x T. 

The key observation in this case is that whenever the match vr^ is in a position (a, s) then 
p ^ k'{s). This is because A^{a, c) = T if p € c and that would contradict that /_^ is winning. 
As a consequence, A^(a, k{s)) = A^{a, k'{s)) and therefore the move suggested by in 
will also be admissible in ^ 3 . □ 

5.2.2 Closure under Boolean operations 

In this section we show that the class of tree languages recognized by the automata of 
Aut^a(FOEi) is closed under the Boolean operations. Starting with the closure under union, 
we just mention the following result, without providing the (completely routine) proof. 

Theorem 5.18. Let A and A' belong to AMt^a(FOEi). There is U E AMt^a(FOEi) such 
that r(u) = r(A)ur(A'). 

In order to prove closure under complementation, we crucially use that the one-step 
language FOEi is closed under Boolean duals (cf. Proposition 14.391) . 
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Theorem 5.19. If A belongs to AMi^(j(FOEi) then the automaton defined in Defini- 
tion \2.y\ also belongs to Auiu,a(FOEi) and recognizes the complement o/T(A). 

Proof. Since we already know that accepts exactly the transition systems that are re¬ 
jected by A, we only need to check that A"^ indeed belongs to A?xt^a(FOEi). But this is 
straightforward: for instance, the additivity and multiplicativity constraints can be checked 
by observing the dual nature of these properties, as shown in Proposition 14.361 □ 

6 Logical characterizations of Aut-wa(FOEi) on trees 

In this section we show that, on trees, the following formalisms are equivalent: 

(i) WCL: Weak chain logic, 

(ii) Autt„a(FOEi): Additive-weak automata based on FOEi, 

(hi) /icaFOE^b Forward-looking fragment of /XcaFOE, 

(iv) /icaFOE: Completely additive restriction of /rFOE. 

Together with the fact that /XcaFOE = FO(TC^) which was proved in Theorem 11.21 this 
implies Theorem 11.41 The spirit of this section (but not the techniques) is similar to |Wal96l 
IWain2] where Walukiewicz shows that Aut(FOEi) = MSO = //FOE on trees. 

Recall that in Remark 12.201 we observed that, in general, the parameters (free variables) 
of a fixpoint cannot be avoided unless we go up in the arity hierarchy. From the equivalence 
of (hi) and (iv) we get, in particular, the following corollary which says that, on trees, it is 
actually possible to get rid of the parameters without increasing the arity of the hxpoints. 

Corollary 6.1. On trees, every ip G /icaFOE is equivalent to a parameter-free ip' G /icaFOE. 

Proof. Direct from the equivalence of (hi) and (iv) and that the hxpoints of /icaFOE^^ do not 
have parameters. □ 

In order to develop the results we hrst perform an analysis of the hxpoints of a special 
class of maps that ‘restrict to descendants.’ The intuition behind these maps, which we will 
introduce shortly, is that they are induced by formulas which are invariant under generated 
submodels. That is, formulas which when evaluated at a certain point, can only talk about 
the descendants of that point. 

6.1 Fixpoint theory of maps that restrict to descendants 

Definition 6.2. A map G : p(M)” —)• p{M) on a model M is said to restrict to descendants 
if for every s € M and X G p{M)^ we have that s G G(X) iff s G G(X fl R*[s]). 

Our main interest in this subsection is to prove the following theorem. 

Theorem 6.3. If G{X,Y') is monotone and restricts to descendants then 

H{Y) := LFPx.G(A, Y) 

also restricts to descendants. 

Proof. Dehne the abbreviations F{X) := G{X,Y) and Fs{X) := G(X, Y n R*[s]) 0 R*[s]. 
We first prove the following claim linking F and Fg. 

Claim 1. For every t G R*[s] we have that t G F{X) iff t G Fs(X). 
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Proof of Claim. Direct using restriction to descendants and monotonicity, together with 
the observation that R*[t] C 


Moreover, this connection lifts to the approximants of the least fixpoints of F and Fg. 
Claim 2. For every t G R*[s] we have that t G F"(0) iff t G F"(0). 

Proof of Claim. We prove it by transfinite induction. It is clear for F°(0) = 0 = F°(0). 
For the inductive case of a successor ordinal a + 1 let t belong to R* [s]. We have 


t G F"“'"^(0) iff t G F{F°‘{0)) (by definition) 

iff t G Fs(F"(0)) (by Claim 1) 

iff t G FsiF^{0)) (by IH) 

iff t G F^~^^{0). (by definition) 

The case of limit ordinals is left to the reader. ◄ 


The following claim is direct by the definition of Fg as G{X,Y n i?*[s]) fl 

Claim 3. lfPx-Fg{X) c LFPx.G'(X, Y n i?*[s]). 

Finally, we use the claims and prove that s G LFPx-G'(X, Y) iff s G LPPx-G{X, Yni2*[s]) 
which means that H(Y) restricts to descendants. 

I I The key observation for this direction is that G{X, Yni?*[s]) C G{X, Y) by monotonicity 
of G. Therefore LFPx.G(Y, Y n i?*[s]) C LFPx.G(Y,Y). 

I I If s G LFPx-G(Y, Y) then there is an ordinal /3 such that s G F^{0). By Claim 2, 
we then have that s G Fg (0) and hence s G LFP(T 5 ). Using Claim 3 we can conclude that 
s gIPPx-G{X,Y nR*[s]). □ 

6.2 Forward-looking fragment of yuFOE 

It is easy to see that parity automata ‘restrict to descendants.’ That is, whenever the game 
^(A, T) is at some basic position (a, s), the match can only continue to positions of the form 
{b,t) where t G Moreover, the game can never go back towards the root of the tree. 

Therefore, it is to be expected that formulas that correspond to parity automata also ‘restrict 
to descendants.’ This concept is formalized as follows. 

Definition 6.4. The forward-looking fragment of /uFOE is the smallest collection of 

formulas containing all atomic formulas, closed under Boolean connectives, and such that: 

• If X = (xi,..., Xm) are individual variables and ip{x, y) is a ;uFOE’'’'-formula whose free 
variables are among x, y then the formulas 

3y.{Rd{xj,y) A V9(x, y)) and yy.{Rd{xj,y) (/?(x, y)) 

are in ^FOE’’” for all 1 < j < m and £ G D. 

• If (p{q, y) is a /iFOE’Tformula which is positive in q and whose only free individual 
variable is y then \f.PPq-y.(p{q,y)]{x) is in ^FOE^^ for all g G P. 

The forward-looking fragment of //caFOE is defined as ^caFOE^^ := //caFOE n ;uFOE’'\ 

Remark 6.5. Fixpoints of /uFOE’’’' are parameter-free. 
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Definition 6.6. Let G //FOE^^ be such that FV{ip) C {z}. We say that ip restricts to 
descendants if for every model M, assignment g and p G P the following holds: 

M,5-|=(^ iff M\p\R*m],g \= p 


where R*[z] := \Ji R*[9{zi)]- 

Remark 6.7. The reader might have expected an alternative definition which requires that 
M,gr 1= iff M[P|'i?*[z]], 5 ( \= p or even that M, 5 ( ^ iff M[P|'i?*[FE((/?)]], 5 r |= p. All these 
definitions can be proved to be equivalent, and we keep the above version because it will 
simplify our inductive proofs. 

Remark 6.8. Restriction to descendants is a weak kind of invariance under generated sub¬ 
models. Suppose that for formulas p G //FOE whose free variables are among x we say that 
p is invariant under generated submodels if for every model M and assignment g we have: 

M, 5 (^(/? iff M{x),g\=p 

where M(x) is the submodel of M generated by g{xi), ..., g{xm)- As an example, the formula 
p{x) := 3//.-ii?(x, y) is not invariant under generated submodels but, as no p occurs in it, it 
trivially restricts to descendants of x. The fragment //EOE^^ can be proved to be invariant 
under generated submodels, but we don’t do it in this paper because we will not need it. 

Proposition 6.9. Let p G //EOE restrict to descendants and be such that FV{p) C {x}. 
For every model M, assignment g, predicates Q C P and variable x G iVar, the map Gx '■ 
p{MY p{M) given by 

Gxi'Z) := {t G M I M[Q Z],g[x i-)-1] |= (/?} 


restricts to descendants. 

Proof. An element t belongs to Gx{'Zi) iff M[Q i— Zi],g[x t\ \= p. As p restricts to 
descendants, this occurs iff M[Q i— Z H i?*[t]],( 7 [x i—> /] \= p. By definition of this is 
equivalent to saying that t G Gx{'ZiPR*\t]). That is, the map Gx restricts to descendants. □ 

Lemma 6.10. Every p G //EOE’’’* restricts to descendants. 

Proof. Fix p G P, we prove the statement by induction on p. 

• If (p does not include p or p = p{x) the statement is clear. 

• Let p(p,x,y) = '0i(p,x) V f’ 2 ip,y)] and consider z such that x,y C z. 

I I Without loss of generality suppose M,^ |= ipi, then by inductive hypothesis we 
know that M[p|'ii*[z]],// |= V’l- From this we can conclude M[p|'i?*[z]], </ |= p. 

I I Without loss of generality suppose M[p|'i?*[z], |= fji. By inductive hypothesis we 

get M, (/ ^ V’l which clearly implies M.,g \= p. 

• Negation is handled by the inductive hypothesis. 

• Let p{p,x) = 3 y.{Rd{xj,y) A fj{x,y))] and consider z such that x C z. 

I I Suppose M, (/ 1= (p. Then there is Sy G Rd[g{xj)] such that M, g[y i-)- |= il>{x, y). 

By inductive hypothesis we get M[p|'i?*[z, //]],//[// e-)- \= fj{x, y) and as Sy G R(i[g{xj)] 

and Xj G z we get that M[p|'ii*[z]], 5 ([// i—)■ \= 'il>{x,y). From this, we can conclude 

that M[ptR*[z]], 5 ( ^ 3y.{Rd{xj,y) A'^{x,y)). 
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I I Suppose M[p|’i2*[z]],S' |= (p. Then there exists an element Sy € Rd[g{xj)] such 
that M[p|'i?*[z]],i-)- Sy] \= 'ip(x.,y). As Sy G Rii[g{xj)] and Xj G z we know that 
R*m = R*[z,y]. Therefore we also have that M.\p\R*[z,y]], g[y !->• Sj^] |= y). 

By inductive hypothesis we get M,y[y Sy\ \= 'il;(x,y). From this, we can conclude 

1= A V’(x,y)). 

• Let (f = [LfPq:y.ilj{q,y)]{z). Observe that by definition of the fragment, we have 
FV{(p) = {z}, q is positive in ^ and FV{'ijj) C {y}. Consider z such that z G z, 
we have to prove that 


M,y^(/? iff M\p\R*[z]],g \= p. 

By semantics of the fixpoint operator M,y \= p g{z) G LFP(T^) where 

(Q) := {t G M I m[q ^ Q],g[x f] ^ 'ijj}. 

It will be useful to take a slightly more general definition: consider the map 

G%x{Q^P) ■={t^M \ M [5 Q-,p^ P\,g[x ^t]\='ijj} 

and observe that T’^(Q) = Gq:x{Q,K\p)) and therefore their least fixpoints will be 
the same. By inductive hypothesis and Proposition 16.91 we know that Gq-x{Q,P) 
restricts to descendants. Using Theorem 16.31 we get that iFPQ.Gq-,x{Q-,i‘^{p)) restricts 
to descendants as well. That is, 

g{z) G IPPq.GI,{Q,k\p)) iff g{z) G \.PPq.GI,{Q, k\p) n R*[g{z)]). 
Because z €z and the monotonicity of Gq-,x, we also get that 

g{z) G lPPQ.G^.JQ,K\p)nR*[giz)]) iff g{z) G LPPq.G^.JQ, k\p) n R*M). 
Using the definition of and the above equations we can conclude that 
y(z)GLFP(Ffj iff y(z) G LFP(fW‘[^11). 

From this, we finally get M,y |= y? iff M[p|"i?*[z]],y \= p- □ 

Historical remarks and related results. The fragment yFOE*' defined here is similar in 
spirit to the bounded and guarded fragments defined in |ABM99l IANvB98l IGW99] . The most 
natural perspective is to see yFOE* as an extension of the bounded fragment of first-order 
logic given in |ABM99) to first-order logic with fixpoints. In |GW99) the authors introduce 
a guarded fragment of ^EOE, however, they aim to make it as big as possible. Eor example, 
their formalism can define the mu-calculus with backward-looking modalities, and therefore 
is not invariant under generated submodels. 

6.3 Translations 

6.3.1 From WCL to Autu,a(FOEi), on trees 
We will first prove the following auxiliary result. 

Proposition 6.11. For every formula p G WCL(P, D) with free variables F C P there is an 
automaton A<^ G Autu,a(FOFi, F) such that for every P-tree T we have T\=piffT\= Ay,. 
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Proof. The proof is by induction on (p. 

• For the base cases q and p = Ri{p, q), we give the following automata. 

ApCq := ({oo}, A, n, oo) where fl(ao) = 0 and 


A(ao,c) 


/\g Vx:s.ao(x) if g € c or p ^ c, 
_L otherwise 


^Ri{p,q) ■= ({ao,«i}, A,n,ao) where O(ao) = ^(ai) = 0 and 


A(ao,c) 


A(ai,c) 


3x:i.ai (x) A As(Vy:s.ao(y)) if p G c, 
AsVx:s.ao(x) otherwise. 


T if g € c, 
_L if g ^ c. 


It is easy to syntactically check that these automata are additive-weak and also it is 
not too difficult to see that they do what they should. 

Remark. A nice observation is that, modally, these automata correspond to Fl*(p ^ q) 
and □*(p —>■ {i)q) respectively. Also, none of the following automata constructions 
(i.e., Booleans and projection) creat cycles on the automata. This shows that all the 
“recursive power” of these automata boils down to the □* construction. 


• For the Boolean cases, where 99 = ■01 V V ’2 or (p = we refer to the closure properties 
of recognizable tree languages, see Theorem 15.181 and Theorem 15.191 respectively. 


• For the case (p = let F be the set of free variables of p. We only consider the case 
where p is free in -0 as otherwise p = if; and by induction hypothesis we already have 
an automaton which we can use as A^. 

Let A^ G Auti„(j(FOEi, F l±) {p}) be given by the inductive hypothesis. We define 
Ap := d^cP-A^ using the construction given in Definition 15.151 Observe that A^ is an 
automaton over p(F) and that: 


T \= d^cP-A^ 


iff T[p I— Xp] ^ A^ for a finite chain Xp C T fLemma l5.17l) 

iff T[p 1 — 7 ' Xp] ^ for a finite chain Xp C T (induction hypothesis) 
iff T ^ BwcP-ip (semantics of WCL) 


This finishes the proof of the auxiliary result. □ 

For the general case, we show the following proposition. 

Proposition 6.12. For every p G WCL(P, D) there is an automaton A^ G Aiit^a(FOEi, P) 
such that for every P-tree T we have T [= (p iffT\= A^. 

Proof. The only observation that we need is that we can transform every automaton A G 
Aut{C,P) which runs on F-trees to an automaton A^ := (A, A'^,D,a/) G Aut{C,P) which 
runs on P-trees by defining 

A'^(a, c) := A(a, c n F) 

for every a G A and c G p(P). The intuition behind this construction is that A^ ignores the 
(P \ F) part of the colors of the nodes. □ 
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6.3.2 Prom 74ut^a(FOEi) to /XcaFOE^% on all models 

With each initialized automaton A € Autu,a(EOEi) we associate a formula (p^ G ^caFOE* 
such that A = (/9 a for all transition systems (that is, not necessarily trees). To do it, we 
first show that every parity automaton can be transformed into an automaton whose induced 
graph is a tree with back edges. This kind of structure has a natural counterpart as a formula. 



Figure 8: Automata, finite unravelling and formula structure. 

Intuitively, the tree part of the automaton is used to define the scaffolding of the cor¬ 
responding formulas. On top of that, the nodes which are the target of back-edges will 
correspond to binding definitions of fixpoint variables. Fig. [8]shows an illustration of this in¬ 
tuition where the target formula is taken to be in the ^-calculus. This is done for illustrative 
reasons, in our case we will actually have binding definitions given by the first-order fixpoint 
operator [LFPaj:j,.(/9i(y)] (x). 

Definition 6.13. A directed graph (G, R C G^) is a tree with back edges if there is a partition 
R = Ekti B oi the edges into tree edges and back edges such that (G, E) is indeed a directed 
tree, and whenever {u,v) G B, then {v,u) G E*. 

Berwanger [Ber05] shows that every finite model can be transformed, via partial unravel¬ 
ling, into a bisimilar finite model which is a tree with back edges. An unravelling technique is 
also present in Janin’s habilitation thesis |Jan06l Section 3.2.3], where he puts modal parity 
automata into the shape of trees with back edges. We adapt these ideas to our setting by 
defining a similar transformation on parity automata of an arbitrary one-step language C. 

Definition 6.14. The finite unravelling of a parity automaton A = (A, A, Q., aj) is the parity 
automaton A“ = (A“, A“, a“) such that 

1. A“ is made of non-empty finite sequences a G A~^ such that oq = aj and ai Oj-i-i) 

2. a“ is the one-element sequence containing only aj, 

3. Every element of A“ is reachable from afi 

4. n“(a-afc) = Q{ak), and 

5. A“(a-afc,c) = A(afc,c)[6 i-G update(a-afc, 5) \ b € A] where update(ao, ..., Ofc, 6) is de¬ 
fined as (a) the shortest prefix oq, • • •, of aQ,... ,ak,b such that ai = b and, (b) for 
every i < j < k we have that fl(oj) < kl{aj)‘, that is, the minimum parity encountered 
in the cycle Oj, Oj+i,..., a* is fl(aj). 

Remark 6.15. Condition ([57b 1 is there to ensure that the target of a back-edge is ‘of maxi¬ 
mum priority’ among the elements of the given cycle. This condition is not necessary for A“ 
to be a tree with back edges. However, it is necessary to make the (possible) alternation of 
fixpoints in the target formula mimic the parity game. 

In our case, as the automata that we use are weak, all the parities of the elements of a 
given cycle are the same. Since the resulting formula will not have any alternation, we could 
have simply left condition (l57bi out. We chose to keep it for compatibility with the results 
of [Jan06] . and for completeness. 
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Lemma 6.16 f [,Tann61 Lemma 3.1.2.3]). A = A“ for any finite unravelling A“ of A. 


As we are working with additive-weak automata, we need to prove that the construction 
preserves the properties of weakness and additivity. In other words, 

Proposition 6.17. If A £ AutwaiH) then A“ G AutwaiH)- 

Proof. Define the projection last : A'^ —)■ A as last(ao, • • •, flfc) := a^- For sets B C A~^ the 
projection is extended to last : p(A~^) p(A) by defining last(i?) := {last(6) | b G B}. 
The foiiowing observations wiii be usefui: 

Claim 1. If C c A“ is a strongly connected component in A“ then last(C) is a strongly 
connected component in A. 

Proof of Claim. It is enough to prove that if uq, ... ,ak Aa“ bo, ... ,bk/ then Aa b^', As 
the notion of strongly connected component is defined in terms of 

Now, because ^ is the reflexive-transitive closure of it will actually be enough to prove 
that if oq, ... ,ak '^A“ bo, ..., bk' then Ok '^a bk'- For this, just observe that if uq, ... ,ak '^a^ 
bo,... ,bk' then, by contruction of A“ in Definition I6.14[ we have that by occurs in A(ak, c) 
for some c G p(P). That is, a*, '^a by- ◄ 

Claim 2. For every strongly connected component C C A“ we have D(last(C')) = D“(C'). 

Proof of Claim. By definition of ◄ 

For the weakness condition we proceed as follows: by Claim [1] we know that if C is a 
maximal strongly connected component in A“ then last(C') will also be a strongly connected 
component in A. As A is weak, then every element of last(C') will have the same parity, which 
we call D“(last(C')). Using Claim |2l we know that D(last(C')) = D“(C'), and therefore get 
that every element of C has the same parity. 

For the additivity condition let C C A“ be a maximally connected component with 
D“(C') = 1 and let a be an element of C. We want to prove that A“(a, c) is completely 
additive in C, for every color c G p(P). Define p := A(last(a), c). It is not difficult 
to observe that, as last (a) is in the connected component last(C'), then p is completely 
additive in last(C'). The key observation now is that if we substitute all the names in p from 
last(C') with some new set of names A' then the new formula will be completely additive 
in A' . To conclude, we just recall that A“(a, c) is obtained by substituting the names from 
last(C') in p with new names that belong to C. Using the previous observation, we get that 
A“(a, c) is completely additive in C. We leave the case of QA{C) = 0 to the reader. □ 

Next, we show that for every A G Aut(FOEi) it is possible to give an equivalent formula 
(Pa{x) G pFOE. Shortly after that, we will focus on the completely additive fragments of 
these formalisms. 

Theorem 6.18. For every automaton A G Auf.u,a(EOEi, P) there is a formula (pA^x) G 
PcaFOE*(P) with exactly one free variable x, such that for every transition system S, 


S 1= *if S N Pa{si). 


Proof. Because of Lemma 16.161 we assume that A can be decomposed as a tree with back 
edges [A, E, B). First we need the following definitions: 


l^aix) := V (rc(x) A A» ^(x)) 


cGC 



54 








where the Aa,c is a guarded version of A(a,c), defined as 


^a,c(2^) := A(a, c)[37/:s.a 3y.Rs{x,y) A a; Vy:s.a i-A \/y.Rs{x,y) a]. 

Now we dehne auxiliary formulas Xa{x) and fia{z) by mutual induction, on the tree {A,E). 



/3a{z) if o is a leaf, 

f3aiz)[a'{y) i-A Xa'iy) I (a, a') G E] otherwise. 


Xa{x) 


/3i(x) if a ^ Ran(i?) 

< [LFPa:2./3|(2;)](x) if a € Ran(i?) and Q,{a) = 1 
[GFPa:^./3l(z)](x) if a € Ran(i?) and Q,{a) = 0. 


Finally, we set ^p^ix) ■= Xai{x)- It is left to the reader to prove that A = (pp^{x). A very 
similar translation (for modal automata) is given in I.IanOhl Lemma 3 . 2 . 3 . 2 - 3 ]. We still have 
to prove that ip^ix) lands in the appropriate fragment, i.e., that ipA{x) € /icaFOE n /uFOE*. 

Claim 1. ‘pk{x) g /XcaFOE. 


Proof of Claim. It is not difficult to show, inductively, that if a G A belongs to a maximal 
strongly connected component C C A of parity 1 (resp. 0) then /3a (z) will be completely 
additive (resp. multiplicative) in C C A. This is enough, because then the hxpoint operators 
bind formulas of the right kind. ◄ 


Claim 2. (pa(x) G fiFOE^X 

Proof of Claim. The formula (Pa(x) can be seen to belong to /uFOE^^ by a simple inspection 
of the construction: more specihcally, the definition of Aa,c(x) guards every quantifier, and 
the hxpoint operators introduced in every Xa(x) are exactly of the form required by the 
fragment |uFOE*. ◄ 

It is worth observing, as a consequence of the last claim, that the hxpoints operators of (Pa(x) 
do not use parameters (that is, they don’t have extra free -individual- variables). □ 


6.3.3 Prom /UcaFOE*’ to /XcaFOE, on all models 
This inclusion is trivial because /UcaFOE^’ C /icaFOE. 


6.3.4 Prom /XcaFOE to WCL, on trees 

In this case we will make use of the correspondence between one-sorted WCL and the two- 
sorted version 2WCL given in Section 12.71 and give a translation from /XcaFOE to 2WCL. The 
translation is given inductively, it is clear that the interesting part is the simulation of the 
hxpoint operator using the weak chain quantiher. 

Let ip = [LFPp:y.?/;(p, y, z)](x) G /UcaFOE be such that EV{'il}) C {y,z}. Observe that this 
formula might have parameters in the hxpoint. That is, the variables z will be free in ip if 
they are free in V’- It will be useful (and necessary) to get rid of them. First we dehne the 
auxiliary formula 

V''(Zi, ...,Zk,p, y) := 3z. /\ Zi{zi) A tjj, 
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and we observe that, assuming that we could use second-order quantifiers, the following 
equivalence holds: 

[LFPp:2^.V’(p,2/,z)](x) = 3 ^„cZ./\Zj = {zi} A [lFPp:y.tp'{Zi,... ,Zk,p,y)]ix), (*) 

i 

where on the right-hand side the fixpoint operator does not have (individual) parameters. 
Using an adequate complexity on the formulas we can still apply the induction hypothesis 
to 'll)’. For example, assign a complexity to the formulas in /icaFOE with a function | • | : 
/UcaFOE —)■ N defined as follows: 

|P(xi, . . .,Xn)\ =n + l 
\[lFPp.y.a{p,y,z)]{x)\ = 10 * | q ; 

— |q:| -p 1 

Claim 1. \ip\ > 

Proof of Claim. By definition of the complexity we have that \ip\ = 10 * |i/:|. Now we 
approximate the complexity of ip'. Recall that ip' = 3z. /\- Zi{zi) A ip, then 

I'lp'l < IV’I + 3 * \'ip\ IV’I • 

AiZiizi) ^ b 


l-ial = |a| -|- 1 

\ai A a2\ = |ai| -I- \a2\ + 1 

|3x.a| = |q;| -|- 1. 


Therefore, lip'l < 6 * jV’l < 10 * |'i/:| = |<^|. ◄ 

By induction hypothesis we know that there is a formula 'ip’^{Zi, ..., Zk,p, y) G 2WCL, which 
is equivalent to ip’^Zi, ..., Zf:,p,y). 

Claim 2. The formula 'ip'^{Zi, ..., Zk,p,y) restricts to descendants (on trees). 

Proof of Claim. Combining the results of the last sections, that is, the translations 

WCL ^ Tuf^a(EOEi) ^ PcaFOE’’ 

we get that ip'^lZi,..., Zk,p,y) is equivalent (on trees) to a formula in ^UcaFOE^b By 
Lemma 16.101 we know that these formulas restrict to descendants. ◄ 

Now we know that ip' is completely additive in p and restricts to descendants. Also, 
we modified it in such a way that there is only one free variable. We did this in order to 
use Proposition 16.91 and obtain that the functional F'^ induced by ip' is completely additive 
and restricts to descendants as well. The following theorem, which will be critical for our 
translation, combines the content of Theorem 13.61 and Theorem 16.31 and gives a characteriza¬ 
tion of the fixpoint of maps that, at the same time, are completely additive and restrict to 
descendants. 

Theorem 6.19. Let F : p{M) —)■ p{M) he completely additive and restrict to descendants. 
For every s G M we have that s G LFP(E) iff s G LFP(E|'y) for some finite chain Y. 

Proof. The proof of this theorem follows from a minor modification of Lemma 13.71 for com¬ 
pletely additive maps, which provides elements ti,... ,tk = s such that U G F’{0). The key 
observation is that, because F restricts to descendants, we can choose the elements in a way 
that for all i. 
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The main change to the proof of Lemma 13.71 is when we want to define Ui in terms of 
rtj+i € By definition we have that rxj+i G G(T*(0),Y). Now we can use that G 

restricts to descendants and get that Uj+i G G{F^{0) Yn By complete 

additivity of G there is a quasi-atom (T, Q^) of (F*(0) n Y n such that 

ttj+i G G{T, Q ). This means that the element chosen from T will be a descendant of rtj+i 
and therefore we will get a (finite) chain. □ 

Proposition 6.20. There is an effective translation (— )* : /XcaFOE — )• 2WCL such that for 
every T and tp G ^caFOE we have T \= p iff T \= (pf . 

Proof. Clearly the interesing case is that of the fixpoint operator. We define the translation 
of the fixpoint as follows: 

{[lfPp-y.'ip{p,y)]{x)Y := 3^c'Z. /\Zi = {z}A 

i 

3^cY.(V^efF c Y.w G PRE(F;f) ^ x e W) 

We PRE(Fl^y) :=Vv.f;U^i,...,Zk,W,v) Av ev ew. 

The first conjunct of this translation is introduced to get rid of the parameters of ip, and 
is justified by (|^. To justify the second part we proceed as follows: first recall that the 
translation of [LPPp:y.ip{p, y)]{x) into MSO is given by 

MW. {W G PRE(E’^) ^xeW). (t-MSO) 

where W G PRE(F’’^) expresses that LF is a prefixpoint of F'^ : p{S) -A p(S). This translation 
is based on the following fact about fixpoints of monotone maps: 

s G LFP(F’^) iff s G f]{W C 5 I LF G PRE(F’^)}. (PRE) 

It is easy to see that ()t-MSOp exactly expresses that g(x) has to belong to every prefixpoint of 
F^. In our translation (—)*, however, we cannot make use of the set quantifier 3W, since we 
are dealing with WCL. The crucial observation is that, as F'^ : p{T) —>■ p{T) is completely 
additive and restricts to descendants, then we can use Theorem 16. 191 to prove that, without 
loss of generality, we can restrict ourselves to finite chains, in the following sense: 

s G LFP(E’^ ) iff s G LFP(E|^) for some f.c. Y (Theorem 16. 191) 

iff s G p|{VF C T I VF G PRE(F^’f)} for some f.c. Y (fPREl) 

iff s e P){PF C Y I VF G PRE(Fpy)} for some f.c. Y. (Image of F^) 

Therefore, the second part of the translation (—)* basically expresses the same as (It-MSOI) 

but relativized to a finite chain Y. The correctness of the translation is then justified by the 

above equations. □ 

7 Expressiveness modulo bisimilarity 

In this section, we characterize the bisimulation-invariant fragment of the main formalisms 
that we have been using throughout the article. Our final objective is to show that 

PDL = FO(TC^)/ii and PDL = WCL/o. 
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That is, we will prove Theorems 11.61 and 11.71 Moreover, we show that the equivalences 
are effective. As a first step, the first subsection characterizes the bisimulation-invariant 
fragment of Aut^a(FOEi), which is our bridge between the logics of this paper. The following 
subsections prove the two main bisimulation-invariance results. Even though the technique 
is almost the same, these statements will be proved in three different subsections which also 
provide additional remarks about the logic in question. We think this is the clearest way to 
present it, in spite of some repetition of the arguments. 

7.1 Bisimulation-invariant fragment of Aui^a(FOEi) 

In this subsection we will define a construction (—)* : Aut^a(FOEi) —>■ Auti„a(FOi) such 
that for every automaton A and transition system § we have: 

A* accepts § iff A accepts 

where is the w-unravelling of § (defined in Section [2.11) . From this, it is easy to prove, 
as a byproduct, that AMf„,„fFOEi = Auty^aiFOi). As we shall see, the map (—)* is 
completely determined at the one-step level, that is, by some model-theoretic connection 
between FOEi and FOi. 

Definition 7.1. We define the one-step translation (—)* : FOE(''(A,<S) ^ FO(''(A,iS) on 
one-step formulas of F0E(''(A,5) which are in strict basic form, as follows: 

(V^E(T,n)3)I := v+o(T,n)3 
where on the right hand side T is seen as a set. 

The key property of this translation is the following. 

Proposition 7.2. For every one-step model (Di, ..., Dn, V) and a G FOE^(A) we have 

(Di, .. .,Dn,V) \= a* iff {Di x {1} x w,..., x {n} x w,I4) ^ a, 

where V-^ is the induced valuation given by Vffa) := {{d,i,k) \ d G E(a),l < i < n,k & cj}. 

In the above proposition the model on the left (call it D) is an arbitrary (not necessarily 
strict) one-step model, whereas the one in the right (call it is a strict one-step model. 
The strictness is obtained by tagging elements of Di, so that the union Di is disjoint. 
Also, unrelated to the strictness of the models, observe that has w-many copies of each 
element of D. 

Proof. I => I Let D |= VpQ(T,n)s, we prove that |= VpQp(T,n)s. The existential part 
(T) is straightforward, by observing that in we can choose as many distinct witnesses 
for each Tj as we want, because of the w-expansion. For the universal part, observe that 
VpQ(T,n)s states that every d € D satisfies some type in 11. Therefore, the same happens 
with the elements of In particular, for the elements that are not witnesses for T. 

Therefore, |= Vj5:Qp(T, n)s. 

I I Let 1= VpQp(T,n)s, we prove that D |= VpQ(T,n)s. For the existential part, 
consider some Tj, we show that it has a witness in D. We know by hypothesis that there is 
some {d,i,k) G which is a witness for Ti. It is easy to see that d works as a witness for 
Tj in D. For the universal part, consider d G D, we show that it satisfies some type in 11. If 
there is some (d, i, k) G such that (d, i, k) is not a witness of T then we are done, as it 
should satisfy some type in 11 by the semantics of VpQp(T, n)s. The key observation is that 
there is always such an element, because at most |T| elements of {{d,i,n) \ n G N} function 
as witnesses for T. □ 
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Remark 7.3. The above proposition is shown in |Zanl21 IFVZ13] for formulas in a special 
normal form, that is, where the elements of T and 11 are either singletons or empty. In their 
case this is enough because, thanks to the simulation theorem, they can assume that their 
(non-deterministic) automata have this kind of formulas in their transition map. In our case 
this is a priory not true. Moreover, we are also in a multi-sorted setting. 

An unsorted version of Proposition 17. 2l is implied by the original proof of /rML = MSO/o 
given in |JW96) . However, the first explicit presentation of these bisimulation-invariance 
results in terms of ‘one-step models’ was published by Venema in |Venl4) . A similar approach 
can also be found in his lecture notes on the /r-calculus |Venl2| . 

The following proposition will be crucial for the development of this section. It states 
that we can assume the transition map of our automata to be in normal form. This is easily 
achieved by transforming the transition map using Corollary 14.421 

Definition 7.4. We say that an automaton A G Autu,a(FO^i) is normalized if the formulas 
of the transition map of A are in the basic normal forms of Section |4l Namely, 

• Every A(a, c) is of the form \/ /\g VpQp.(T, n)s as given in Corollary 14.251 and, 

• If A(a, c) is completely additive in A! C A, the additional properties of the normal form 
stated in Corollary 14.351 apply. 

We say that A is strictly normalized if the formulas of the transition map of A are in the 
strict normal forms of Section |4l Namely, 

• Every A(a, c) is of the form \/ /\g VpQp(T, n)s as given in Corollary 14.251 and, 

• If A(a, c) is completely additive in A C A, the additional properties of the normal form 
stated in Corollary 14.351 apply. 

Proposition 7.5. For every A G Awf^a(FOEi) we can effectively construct: 

• A normalized automaton A' G Auti„a(FOEi) such that A = A' over all models. 

• A strictly normalized automaton A' G Auti„a(FOEi) such that A = A' over strict trees. 

Finally, we can give the main definition of this section. That is, we define A* for every 
A. This definition will be tailored to satisfy the condition: 

A* accepts § iff A accepts 

Therefore, it is worth reminding that as A is run on (which is a strict tree) we can assume 
that the transition map is in strict normal form. 

Definition 7.6. Let A = (A, A, H, aj) be an automaton in Aut(FOEi). Using Proposition [73] 
we assume that A is strictly normalized. We define the automaton A* := (A, A*,H,a/) in 
Aut(FOi) by putting, for each (a, c) G A x p(P): 

A*(a,c) := (A(a,c))*. 

First, it needs to be checked that the construction (—)*, which has been defined for 
arbitrary automata in Aut(FOEi), transforms the additive-weak automata of Auf^a(FOEi) 
into automata in the right class, that is, Aut^a(FOi). 

Proposition 7.7. Let A G Aiit(FOEi). If A £ Aut^jaiFOEi), then A* G Aiit^a(FOi). 
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Proof. This proposition can be verified by a straightforward inspection, at the one-step level, 
that if a formula a € FOE^(^) belongs to the fragment FOE^ADD^/(^), then its translation 
a* lands in the fragment FO||^ADDa'(j 4). The same relationship holds for FOE^MUL^i/(A) 
and FORMULA'(A). □ 

We are now ready to prove the main lemma of this section. 

Lemma 7.8. There is an effective construction (—)* : AutwafFO^i) Tuf^a(FOi) such 
that for every automaton A and transition system S we have: 

A* accepts S iff A accepts . 

Proof. The proof of this lemma is based on a fairly routine comparison of the acceptance 
games >1.(A*,S) and ^(A, S'^), using the fact that is a strict tree. A similar proof for the 
unsorted case can be found in |JW96[ IZanl21 IFVZ13] . □ 

Remark 7.9. Actually, for each automaton A it is possible to give a number k such that 

A* accepts § iff A accepts 

taking k := max{n | dif f (xi,..., Xn) occurs in A} -|- 1. This means that our results transfer 
to the class of finitely branching trees and finite trees as well. 

7.2 Bisimulation-invariant fragment of FO(TC^) 

In this section we prove the following equivalence: 

PDL = FO(TC^)/ii:. 

Moreover, we prove that the equivalence is effective. 

One of the inclusions is given by a straightforward translation from PDL to FO(TC^). 

Proposition 7.10. There is an effective translation ST^'^ : PDL —>• FO(TC^) such that 
if = ST*'^((/?) for every ip G PDL. 

Proof. The translation is defined by mutual induction on formulas and programs, as follows: 

. ST*J=(p) :=p{x) 

. := -ST^^((^) 

. STiffip V ^P) := V STifffj) 

. ST^'^((7r)(^) := 3y.Rffx,y) A ST*^(¥p) 

where the complex programs are translated as follows 

• R.^.y{x,y) := 3x'.R.^{x,x') AR^i{x',y) 

• RTrm'ix^y) ■= R7v{x,y) V R^/(x,y) 

• R^iix, y) := x^y A STjf (v?) 

• RT,*{x,y) := [JQ.z,wR-K{z,w)]{x,y). 

It is clear that the translation is truth-preserving. □ 

For the other inclusion we prove the following stronger lemma. 
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Lemma 7.11. There is an effective translation (— )▼ : FO(TC^) — >■ PDL such that for every 
if € FO(TC^) we have that tp = ipf iff ip is bisimulation-invariant. 

Proof. The translation ( —)▼ : FO(TC^) —>■ PDL is defined as follows: given a formula 
ip € FO(TC^) we first translate it to /UcaFOE using Theorem II.21 and construct an automaton 
€ ^■ut^a(FOEi) as done in Section[6l Next, we compute the automaton A* G Aut^a(EOi) 
using Lemma 17.81 To finish, we use Eact ll.5l to get a formula ipj G PDL. 

Claim 1. ip = ip^ ip \s invariant under bisimulation. 

The left to right direction is trivial because ipj G PDL, therefore ip = ip^ it also has to 
be invariant under bisimulation. The opposite direction is obtained by the following chain of 
equivalences: 


§ ^ iff 


(ip bisimulation invariant) 

iff 

^ A^. 

(Theorem 11.41 pcaFOE = Aut^a(EOEi) on trees) 

iff 

sih a; 

(Lemma 17.81) 

iff 

S IP . 

(Eact 11.51) 


This finishes the proof for PO(TC^). □ 

As a corollary of this lemma we get Theorem 11.61 

7.3 Bisimulation-invariant fragment of WCL 

In this section we prove the following equivalence: 

PDL = WCL/o. 

Moreover, we prove that the equivalence is effective. 

One of the inclusions is given by a translation from PDL to WCL. We prove this through a 
detour via the modal //-calculus. In |CV14) it is shown that PDL is equivalent to the frag¬ 
ment /icaML where the fixpoint operator pp.ip is restricted to formulas which are completely 
additive in p. We will therefore give a translation ST^'^ : //caML —>■ 2WCL which proves that 
PDL < WCL. The idea is to use basically the same translation as in Section 16.3.41 where we 
prove that //caFOE < WCL on trees. 

The only interesting case of the translation is the fixpoint operator. Let ip = pp.iffp) 
where fj is completely additive in p. We state the following claim 

Claim 1. The formula G //caML restricts to descendants. 

Proof of Claim. This is clear because the formula belongs to //ML. These formulas are 
invariant under generated submodels, in particular, they restrict to descendants. ◄ 

To finish, define the translation of the fixpoint as follows: 

STf^ipp.f;) := C Y.W G PRE(F.^) x G W) 

W G PRE(E.;^) := Vi;.ST7(i/:)[p e^WjAvGV^vGW. 

The correctness of this translation is a simplified version of the proof of Proposition 16.201 
using Claim [1] and Theorem 16.191 

Eor the other inclusion we prove the following stronger lemma. 
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Lemma 7.12. There is an effective translation (—)▼ : WCL —?■ PDL such that for every 
ip € WCL we have that p = py iff p is bisimulation-invariant. 

Proof. The translation (—)t : WCL —>■ PDL is defined as follows: given a formula p E WCL 
we first construct an automaton E AMt^(j(FOEi) as done in Section |6l Next, we compute 
the automaton A* E using Lemma 17.81 To finish, we use Fact 11.51 to get a 

formula pj E PDL. 

Claim 1. p = py p \s invariant under bisimulation. 

The left to right direction is trivial because py E PDL, therefore p = py it also has to 
be invariant under bisimulation. The opposite direction is obtained by the following chain of 
equivalences: 


§\=p iff 


{p bisimulation invariant) 

iff 

S'" N 

fTheorem 11.41 WCL = A'uf^a(FOEi) on trees) 

iff 

SIhA; 

(Lemma 17.81) 

iff 

S Ih py. 

(Fact 11.51) 


This finishes the proof for WCL. □ 

As a corollary of this lemma we get Theorem 11.71 

7.4 PDL versus WCL versus FO(TC^) 

In this section we prove a few results regarding the relative expressive power of PDL, WCL 
and FO(TC^). Namely, we prove that: 

• PDL cannot be translated to a naive generalization of WCL from trees to arbitrary 
models. This gives insight into the relationship of PDL and generalized chains. 

• WCL and FO(TC^) are not expressively equivalent. 

The letter of the law. Recall from the preliminaries fSection 12.11) that, 

• A chain on S is a set X C S such that {X, R*) is a totally ordered set. 

• A generalized chain is a set X C S such that X C P, for some path P of §. 

In the definition of WCL in Section [2771 we chose to follow the spirit of the original definition of 
CL in |Tho84) . and we required the quantifier to range over generalized finite chains, instead 
of finite chains, in the context of arbitrary models. 

There is another reason for this choice: if we had followed the letter of the definition and 
had required the quantifier to range over (non-generalized) finite chains in the context of 
arbitrary models, then PDL would not have been translatable to the resulting logic! Suppose 
then that we define a variant L of MSO with the quantifier: 

§ 1= 3p.p iff there is a finite chain X C S such that §[p e-)- X] \= p. 

We show that L cannot express the PDL-formula p := {(.*)p. That is, L cannot express the 
property “I can reach an element colored with p.” Intuitively, the problem is that chains are 
a lot more restricted than paths (on arbitrary models). 

We will first define a class of models where the expressive power of L is reduced to that of 
FOE, and then prove that FOE cannot express p on this class of models. Let Cj be defined 
as a model with i elements laid out on a circle (see Fig. El and C7 be as Cj but with one 
(any) element colored with p. We define the class of models K := {C* ktl C7 | i > 3}. 


62 






Figure 9: Model C* ktl Cf. The element i' is colored with p. 


Proposition 7.13. Over the class K, the logic L is exactly as expressive as FOE. 

Proof. Every chain on a model of K is either a singleton or empty. □ 

Observe now that our formula p = {i*)p is true exactly in the elements of Cf, and false 
in Cj, for every i. Assume towards a contradiction that there is a formula if ^ L such that 
p = on all models. If we focus on A, using the above proposition, we must also have a 
formula 7 € FOE such that 'i/’ = 7 (on K). We show that such a 7 € FOE cannot exist. 

To do it, we rely on the fact that hrst-order logic is “essentially local”, proved by Gaif- 
man |Gai82) . Recall that an n-neighbourhood of an element e is the set of all the elements 
e' such that the undirected distance dist(e, e') is smaller or equal than n. The following fact 
is a corollary of Gaifman’s theorem. 

Fact 7.14. For every first-order formula 7 (x) there is a number t G N (which depends only 
on the quantifier rank of 'j) such that for every model M and elements a, a' G M: if the 
t-neighbourhoods of Ui and a[ are isomorphic for every i then M |= 7 (a) iffM.\= 7 (a'). 

Let t be the number obtained by the above fact applied to 7 (x). To hnish, we prove the 
following fact. 

Claim 1. C 44 |= 7(2t) iff C 4 t \= 'y{2t'). 

Observe that this leads to a contradiction, since 7 should be false at 2t and true at 2t'. 

Proof of Claim. The t-neighbourhoods of 2t and 2t' are isomorphic, since no element 
is colored with p with distance lower than t. Therefore by the above fact about hrst-order 
locality the two elements satisfy the same hrst-order formulas. A more detailed proof of a 
similar argument can be found in |LN991 Ex. 2]. ◄ 

As a consequence, we get the following proposition: 

Proposition 7.15. PDL ^ L. 

Separating FO(TC^) and WCL on all models. We prove that FO(TC^) ^ WCL by 
showing that undirected reachability is expressible in FO(TC^) but not in WCL. First observe 
that in FO(TC^) the formula 

ip{x,y) := [JCu,vR{u,v)y R{v,u)]{x,y) 

is true iff x = y or there is a way to get from x to y disregarding the direction of the edges. 

Consider the model shown in Fig. [101 which has two copies of the integers but with an 
alternating successor relation. The arrows denote the binary relation R which is not taken 
to be transitive. 
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(a,-3) (a,-2) (a,-1) (a,0) (a, 1) (a, 2) (a, 3} 

•<-•-• 

(6,-3) (6,-2) (6,-1) (6,0) (6,1) (6,2) (a, 3) 

•<-•-• 

Figure 10: Separating example for FO(TC^) and WCL. 


It was observed by Yde Venema (private communication) that on the model of Fig. ITOlthe 
expressive power of WCL collapses to that of plain first-order logic with equality. The reason 
for this is that every generalized chain (finite or not) has length at most one, and therefore 
the second order existential can be replaced by 3xi,X2-t/’' with a minor variation 

of V’- Therefore, it will be enough to show that first-order logic cannot express undirected 
reachability over this model. Again, we will use Fact 17.141 

Assume that (p has an equivalent formulation (p' € FOE. Let t be the number obtained 
by Fact 17.141 To finish, we prove that 

Claim 1. M |= ip'((a, 0), (6,0)) iff M |= ip'((a, 0), (a, 2t)). 

Observe that this leads to a contradiction, since the first two elements are not connected 
and the second ones are. 

Proof of Claim. The t-neighbourhoods of (6,0) and {a,2t) are isomorphic, therefore by 
the above fact about first-order locality the two elements satisfy the same first-order formulas. 
A more detailed proof of a similar argument can be found in |LN99[ Ex. 2]. ◄ 

Observe also that in the above model M we also have that non-weak chain logic (CL) col¬ 
lapses to first-order logic, therefore the same proof gives us that FO(TC^) ^ CL. Therefore, 
we have proved the following proposition: 

Proposition 7.16. FO(TC^) ^ WCL and FO(TC^) ^ CL. 

The above results can also be proved with a finite part of M, for example, restricting it 
to the segments (a,±4t) and (6, ±4t). 

8 Conclusions and open problems 

In this article we proved several characterization results for modal and classical fixpoint logics. 
The main results can be grouped as follows: 

1. We proved that FO(TC^) = ^caFOE. That is, first-order logic with (binary) transitive 
closure is expressively equivalent to the fragment of FO(LFP^) where the fixpoint is 
restricted to completely additive formulas (Section [3|. 

2. We introduced a new class Ant^a(FOEi) of additive-weak parity automata and proved 
that, on trees, the following formalisms are equivalent (Section [6]): 

• WCL: Weak chain logic, 

• Autt„a(FOEi): Additive-weak automata based on FOEi, 

• /icaFOE: Completely additive restriction of /rFOE. 
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3. We gave two characterization results for PDL and, at the same time, solved the open 
problems of the bisimulation-invariant fragments of FO(TC^) and WCL (Section [7|. 
Namely, we proved that PDL = FOlTC^l/f-)- and PDL = WCL/o. 

In order to obtain the results of the above list, we also had to develop many secondary results 
that are of independent interest. Among others, we proved: 

1. Characterization of fixpoints of completely additive maps fTheorem 13.6p . 

2. Characterization of fixpoints of maps that restrict to descendants (Theorem 16.31) . 

3. Separation of FO(TC^) and CL/WCL (Proposition 17.161) . 

4. Normal forms and completely additive fragments for FOi and FOEi (Section |4|). 

Open questions. There are many old and new open problems related to the content of 
this paper. In the following non-exhaustive list we name a few of them: 

• Automata for Monadic Path Logic. Moller and Rabinovich |MR99) show that the full 
computation tree logic (CTL*) corresponds, on trees, to the bisimulation-invariant frag¬ 
ment of monadic path logic (MPL). The latter logic is a variant of MSO which quantifies 
over full (finite or infinite) paths. In contrast, WCL quantifies over subsets of finite 
paths. Moller and Rabinovich do not use an automata-theoretic approach and leave this 
approach as an open question. Given the similarities between PDL and CTL*, it would 
be interesting to see if the approach in this article can be applied to get an automata 
characterization of MPL and also characterize its bisimulation-invariant fragment on 
the class of all models. 

• Characterization of full FO(TC) inside FO(LFP): In this article we gave a precise 
characterization of the relationship between FO(TC^) and FO(LFP^). It would be 
worth checking if this relationship lifts to FO(TC) and FO(LFP). As the logic FO(TC) 
captures NLOGSPACE queries, and FO(LFP) captures PTIME this result could shed 
light on the relationship between NLOGSPACE and PTIME. 

• Finitary versions of the bisimulation-invariance theorems: It would be interesting to 
know if the bisimulation-invariance results of this article hold in the class of finite 
models. However, it is also not known whether the more fundamental equivalence 
//ML = MSO/o holds on finite models or not. 

• The confusion conjecture: In |Boj04| Bojahczyk defines a notion of ‘confusion’ and 
conjectures that a regular language (i.e., MSO definable) of finite trees is definable 
in CL iff it contains no confusion. A remarkable property of the notion of confusion 
is that it is decidable whether a language has it or not. As the results of our paper 
transfer to finite trees (and CL = WCL in that class) the conjecture implies that a 
language definable in the mu-calculus (on finite trees) is definable in PDL iff it contains 
no confusion. It is a major open problem whether we can decide if an arbitrary formula 
of /uML is equivalent to some formula in PDL. Therefore, it would be important to 
check the confusion conjecture. 

• Characterization of Aut^a(FOEi) on all models: It is known that, on all models, 
AMt(FOEi) is equivalent to the graded //-calculus IJanOb) . As we know that the equiv¬ 
alences AMt(FOEi) = MSO = PO(LFP^) hold on trees |Wal96) . this means that, on 
trees, all these formalisms are equivalent to the graded //-calculus. It would be inter¬ 
esting to see if a similar result can be obtained for A//t^a(POEi). 
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Our conjecture is that j4ut^a(FOEi) is, on all models, equivalent to a graded version 
of /icaML. We think that, equivalently, ^nt^a(FOEi) corresponds to a kind of graded 
PDL where the number restrictions can only be applied to atomic programs. This may 
be better seen as the description logic ACCQ^eg (see [Sch91[ lGL96] b As a corollary, we 
would get that, on trees, EO(TC^) is equivalent to AECQreg- 

• Restriction to descendants: The autors of |ABM99] show that the bounded fragment 

of first-order logic is equivalent to the hybrid language @). If /iFOE^^ is a proper 
generalization of this language, it should be possible to prove that //FOE’’^ = @). 

• Standalone proof 0 /PDL = FO(TC^)/-f->-: One of the most cumbersome parts of this 
article is the logical characterization of Antu,a(FOEi) as WCL on trees. In particular, 
the simulation theorem and the closure under projection are very technical. If we are 
only interested in proving that Aut^a(FOEi) = FO(TC^) on trees, it shouldn’t be 
strictly necessary to go through WCL as we do in Section |6l 

The crucial point is to show that from //caFOE’'^ we can directly construct an equivalent 
automaton in Aut^a(FOEi). While doing it, we would have to prove that Attt^a(FOEi) 
is ‘closed under the LFP operation.’ It is possible that a proof like |Jan06[ Theo¬ 
rem 3.2.2.1] could be adapted to this setting. In that case, WCL could be completely 
taken out of the picture. 
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